[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Response to Russ Housley's comment on security considerations



> Date and Time: 2004-01-22, 10:44:52
> Version: 03
> Commented by: Housley, Russ
> State before Comment: 0
> State after Comment: 0
> Comment:   The security considerations ought to say how following the
> practices in this
>   document will improve security of the Internet.
>

I added the following sentence to the security considerations section:

    The justification
    section of each individual requirement lists the security
    implications of meeting or not meeting the requirement.

The benefits/vulnerabilities differ requirement by requirement.
I could try to generalize/summarize if you think it would be
useful.   This would largely be a restatement of info from
the goals, motivation and scope sections in the intro.

---George Jones