Michael Jones <[email protected]> wrote: > is only used to impose normative requirements in the main body of the > specification and not in the Privacy Considerations or Security > Considerations, which are just that: things to consider - not normative > requirements.
I also think it's bad form to make implementers find the MUSTs in the considerations. They should be in the main body, and just referred to in the Considerations. "Because we do XYZ (Section ABC), we are therefore immune to attacks my giant spiders" -- Michael Richardson <[email protected]>, Sandelman Software Works -= IPv6 IoT consulting =- *I*LIKE*TRAINS*
signature.asc
Description: PGP signature
_______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
