On Wed, Sep 13, 2017 at 11:34 PM, Ian Boston <[email protected]> wrote: > On the other hand, if you are saying that the Oak Threat model has to be > developed and agreed, before this patch can be added, then I am concerned > that will take too long. Doing justice to an Oak Treat model will require > resource.
I think it will not be necessary to wait for a threat model before accepting this patch. In my opinion the patch already received a good scrutiny. The threat model is something we need but should be an effort independent from this patch.
