Re: [i2rs] draft-mglt-i2rs-security-environment-reqs, REQ 3

[Jeffrey Haas <[e-mail]>]

[Answering in this response]

On Thu, Aug 27, 2015 at 04:54:33PM -0400, Susan Hares wrote:
> Alia and Jeff:
> 
>  
> 
> Should we just drop this requirement? 

I think that may be the right thing to do.  Even if it's aspirational,
including it as a "requirement" may set the bar so high that it sabotages
our other goals for I2RS.

The aspiration, "Don't mess up your system", is rather hard to enforce.
Vendors are too often in the position of selling ropes to their customers to
hang themselves with - or do macrame.  But it's still rope.

-- Jeff