Re: [secdir] [Isms] secdir review ofdraft-ietf-isms-transport-security-model-12

[Barry Leiba <[e-mail]>]

> That is a deployment decision made by an administrator who has an
> understanding of what is appropriate to the system in question.
>
> What is the correct non-RFC2119 phrase in which to couch our
> deployment advice?

Well, this would make me happy; would it work for you (and others)?:

OLD:
   by the RFC 3411 architecture.  However, the Transport Security Model
   does not provide security mechanisms such as authentication and
   encryption itself, so it SHOULD always be used with a Transport Model
   that provides appropriate security.  Which threats are addressed and
   how they are mitigated depends on the Transport Model.

NEW:
   by the RFC 3411 architecture.  However, the Transport Security Model
   does not provide security mechanisms such as authentication and
   encryption itself, so it MUST always be used with a Transport Model
   that provides appropriate security.  What is "appropriate" for a particular
   deployment is an administrative decision.  Which threats are addressed
   and how they are mitigated depends on the Transport Model.

Barry