On 23/11/16 17:12, Myers, Kenneth (10421) wrote: > What are your pro/cons?
The pro is that we would then be stating explicitly what everyone presumes to be already the case, and that if it did come to our attention that there was a violation, we would have grounds for complaint. The con is that one could argue it's not wise to make a requirement unless there is some reasonable detection and enforcement mechanism. Whether that is true in this case is a debatable question. Some issues are easier to detect than others. Gerv _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

