[Model-t] scope (was: Re: w3c also thinking about threat models)

[Stephen Farrell <[e-mail]>]

Hiya,

On 23/09/2019 17:04, Dominique Lazanski wrote:
> FWIW it would be useful to be all inclusive with ideas and threats
> and then define what is in and out of scope for the threat model
> rather than limit the scope right away.
I'm not sure if I agree or disagree with that:-) That's
because I'm not sure what you're concerned might be out
of scope - can you clarify?

In case it helps, the scope for this list AIUI is as
described when the list was created after IETF105:

"The model-t list is for discussions of changes in Internet
deployment patterns and their impact on the Internet threat
model, and to develop advice for designing, implementing and
deploying Internet protocols in ways that account for these
changes. Output may eventually be contributed to the IETF
consensus process if the IETF believes an update to BCP 72/RFC
3552 is warranted and thus ought be consistent with related
IETF consensus positions, such as BCP 188 and BCP 200."

I think that's pretty broad, and means we can talk as much
as we want about things in this space, but a useful output
sorta has to be one that might get traction in the IETF as
some kind of modification of, or extension to, BCP72.

Cheers,
S.