Our Threat Model section includes a "Contact channel," but with the removal of recovery options, the spec no longer has anything to say about what gets sent to contacts. I think we should probably remove it from the threat model. Any thoughts?
_______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
