Re: [Ideas] Spencer Dawkins' Yes on charter-ietf-ideas-00-00: (with COMMENT)

[Spencer Dawkins at IETF <[e-mail]>]

Hi, Alvaro,

On Mon, Sep 11, 2017 at 5:14 PM, Alvaro Retana (aretana) <[e-mail]>
wrote:

> Spencer:
>
> Hi!
>
> The support documents are listed as examples, and the current intent is
> not to publish them.
>
> I fully expect the Framework to have appropriate Security Considerations
> (i.e. not a section saying that other documents will consider security) so
> that every future document doesn’t have to re-examine, at least the general
> portion.  Other documents may obviously contain specific considerations
> applicable to them (for extensions, protocols, etc.).
>

This sounds excellent.


> If you want to, I can add a line pointing explicitly at general security
> implications of GRIDS as part of the items that should be considered when
> developing the framework.


Do the right thing, but I do think recent experience has shown that it's
easy to push off the security analysis at the framework level so that a
working group can produce a specific usage quickly (or, it would have been
quickly, if the specific usage was able to point to existing security
analysis in the framework itself ;-)

Spencer