I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written primarily for the benefit of the security area
directors.  Document editors and WG chairs should treat these comments just
like any other last call comments.

The summary of the review is: HAS NITS

RE: ACME over hidden services

This changes a "SHOULD strongly consider making their ACME server available as
a Tor hidden services" to "is RECOMMENDED to make...", which is even worse.

Whereas what I think it should say is "SHOULD make their ACME server available
as a Tor hidden service".

Derrell