Re: [Rats] I-D Action: draft-birkholz-rats-uccs-01.txt

[Benjamin Kaduk <[e-mail]>]

On Wed, Jun 10, 2020 at 01:53:57PM +0200, Carsten Bormann wrote:
> Hi Laurence,
> 
> > It seems better factoring to associate the security model with the use cases than with the data structure format.
> 
> There are many ways to (insert vegan version of “skin this cat”).
> 
> Generally, the IESG has not been happy with defining protocols without discussing their security, so UCCS will need some security considerations.  The pure admonition “write up your security considerations” makes a bad security considerations section.  Picking one use case (here: the one that motivates us to write this document now) seems like a good way to evoke the kinds of security considerations other application environments will have.

Depending on the IESG, you may also get asked to mention situations that
could cause big problems in use cases other than the one being considered,
even if they are non-issues for the specific use case in question, as a way
to avoid potential "gotcha"s for the future documents that provide
alternative use cases/analyses.

-Ben