I have some comments about the OAuth draft RFC (specifically about some errors it contains), but I'm not sure what the accepted way is to make them.
There's an email address at the bottom, so do I simply send mail there with the comments, or is there some IETF tool I should know about for tracking comments/issues?
The OAuth mailing list would be my first guess. I found this through the IETF home page.
The best late-process way to report an error is indeed to use the email address at the bottom of the document, and contact the author directory. Early stage discussions take place on mailing lists. Errors can (sometimes) be handled with errata to the RFC.
来源：https://stackoverflow.com/questions/2586111/how-do-you-comment-on-an-rfc