RFC 8995, "Bootstrapping Remote Secure Key Infrastructure (BRSKI)", May 2021

Errata ID: 7263
Status: Held for Document Update
Type: Technical
Publication Format(s) : TEXT, PDF, HTML
Reported By: Rufus Buschart
Date Reported: 2022-12-09
Held for Document Update by: Mahesh Jethanandani
Date Held: 2026-01-31

Section 5.5 says:

idevid-issuer:  The Issuer value from the pledge IDevID certificate
  is included to ensure unique interpretation of the serial-number.
  In the case of a nonceless (offline) voucher-request, an
  appropriate value needs to be configured from the same out-of-band
  source as the serial-number.

It should say:

idevid-issuer:  The Issuer value from the pledge IDevID certificate
  SHOULD BE included to ensure unique interpretation of the serial-
  number.
  In the case of a nonceless (offline) voucher-request, an
  appropriate value MUST be configured from the same out-of-band
  source as the serial-number.

Notes:

The current language is no language according to RFC 2119.

Verifier Note:

The update in rfc8366bis will address this Errata.

Report New Errata