Mohan Parthasarathy wrote: ...
Is there a document that explains what threat needs to be addressed by multi6 solution ? (the threats document mentions this in a few places, but does not look like requirements to me).
We have no plan to produce a security requirements document. Obviously, the solution architecture will need to contain an analysis of how it deals with all the identified threats. HBA is not a total solution, so it doesn't need to do that.
Brian