Skip to content

Verify all references; correct QS08 attribution and QS05 stale draft - #19

Open
m-khan-97 wants to merge 1 commit into
OWASP:mainfrom
m-khan-97:citation-verification-sweep
Open

Verify all references; correct QS08 attribution and QS05 stale draft#19
m-khan-97 wants to merge 1 commit into
OWASP:mainfrom
m-khan-97:citation-verification-sweep

Conversation

@m-khan-97

Copy link
Copy Markdown

A verification pass over every reference in the list: all 29 unique links across
the ten entries, checked against primary sources rather than link-checked. Two
corrections result. Everything else held up.

Correction 1 - QS08 attribution

The crosstalk paper is attributed to Choudhury et al.

The author list is Navnil Choudhury, Chaithanya Naik Mude, Sanjay Das,
Preetham Chandra Tikkireddi, Swamit Tannu, Kanad Basu. Confirmed three
independent ways:

  • The arXiv metadata API for 2412.10507 - the identifier the entry already cites.
  • The NDSS proceedings PDF, filed as 13C-f2185-choudhury.pdf.
  • The NDSS paper page author list.

Attribution on this one looks genuinely easy to get turned around, so the
verification comment now records the evidence inline - the intent being that the
next person to check it has the sources to hand and does not need to change it
again. The fix touches four places in QS08 and the QS08 row of the README table.

Correction 2 - QS05 stale draft

draft-ietf-tls-hybrid-design was published as RFC 9954 (Informational, July
2026). QS05 reference #5 now points at the RFC. This is the same fix already noted
in #17 and #12; QS05 was the remaining occurrence.

What was checked and found correct

  • All six academic DOIs (QS08, QS09, QS10) resolve to publications whose title,
    first author, venue and year match the entry exactly, verified via Crossref
    metadata. The platform-surface citations are in good shape.
  • NCSC PQC migration timelines - the 2028 discovery, 2031 early-priority and
    2035 completion milestones all match the live page, as does the statement that
    new PQC standards are needed for TPMs, X.509 PKI, UEFI Secure Boot and 6G. Cited
    by four entries; all four uses are accurate.
  • NIST IR 8547 is correctly cited as an initial public draft. It has not been
    finalised, so the existing (Draft) qualifier should stay.
  • All 29 links resolve. Several return 403 to automated requests - nsa.gov,
    cisa.gov, ACM DOIs, trustedcomputinggroup.org - but load normally in a browser.
    Worth recording so a future automated check does not report them as broken.

Note on method

Link-checking would not have caught either correction: both URLs return 200 and
always did. The RFC 9954 change is invisible unless the target is read, and the
attribution error is only visible in the paper's own metadata. This is the
practice the evidence convention in #18 describes - verify the target, not the
link - so this PR is partly a demonstration that it finds real defects.

No entry text is changed apart from the two citations and the comments recording
what was verified.

Verified all 29 reference links across the ten entries against primary
sources. Two corrections result.

QS08: the crosstalk paper is attributed to "Choudhury et al." Navnil
Choudhury is the paper's first author, confirmed against the arXiv
metadata API for 2412.10507 and the NDSS proceedings PDF. The verification
comment records this so the attribution is not changed again.

QS05: draft-ietf-tls-hybrid-design was published as RFC 9954 in July 2026.

Everything else checked out: all six academic DOIs match their stated
title, first author, venue and year, and the NCSC 2028/2031/2035
milestones match the live guidance page.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant