Hi, I am the assigned ops reviewer for this draft. This draft is an Informational draft, which defines the integration of ACME with EST, Brisk, and TEEP for automatic certificate enrollment for devices. It would be clearer if the draft title matchs the content,e.g. ACME integration for device certificate enrollment. Nits: 1) In Section 6, s/enrol/enroll After establishing the outer TLS tunnel, the TEAP server instructs the client to enrol for a certificate by sending a PKCS#10 TLV in the body of a Request-Action TLV. 2) In Section 9, s/the the/the An attacker that has access to them, can provision their own certificates into the the name space of the entity. Thanks, Bo