I reviewed -17 and did not see any reply to my secdir review of -16 (https://mailarchive.ietf.org/arch/msg/cose/hHtLxDY-n6Gu6osm30gOAzvBxIA/), nor do I see any changes to the document that I suggested.

Given this, I believe the comments provided for -16 are still relevant for -17.