[Mud] what if MUD file is now longer available?

[Michael Richardson <[e-mail]>]

{did the list transition go as intended?}

What should a MUD-manager do if a MUD file can no longer be found at the
provided URL?   Perhaps this is equivalent to the signature not verifying.

I'm thinking specifically of a case where a device is initially created by a
contractor, they dutifully create a MUD file, provide it to the customer to
host, and then.. the customer forgets... marketing reorganizes the web site,
etc.  and so the MUD file goes missing.

Section 13.2 says that the MUD-manager should cease processing at that point.
I guess at that point, the access should therefore be default-deny.
I guess the other question is what would the access be if there were no
MUD URL at all.  We'd all like to be default-deny, but I think that during
a transition period it can't be that.


--
Michael Richardson <[e-mail]>, Sandelman Software Works
 -= IPv6 IoT consulting =-