Repository navigation
Add Security Considerations section #2950
Description
I expect
- a Security Consideration section / document
Instead
- there is not
- some security hints are scattered throughout the document
cc: @darrelmiller
{{ message }}
cc: @darrelmiller
Activity
MikeRalphson commentedon Feb 21, 2023
Link #3037
handrews commentedon May 24, 2024
@OAI/tsc / @darrelmiller is this done? Should we add the currently-separate Security Considerations document into 3.0.4 and 3.1.1 as a section?
ralfhandl commentedon May 28, 2024
Yes, please, and add links to corresponding specification sections to the text.
miqui commentedon May 29, 2024
@ralfhandl , @handrews I would like to up vote Ralf's suggestion.
handrews commentedon May 29, 2024
@ralfhandl @miqui I think the only reason this was ever a separate document is that we couldn't insert it into the published documents after the fact.
I agree that we should at least link it, but in most specifications (IETF, W3C, etc.) "Security Considerations" is a section in the document itself. So I'm asking if we should put it in 3.0.4 and 3.1.1 or if there is a reason to keep it separate.
darrelmiller commentedon May 30, 2024
TDC consensus to move this content into the patch updates. Suggestion to add headings to make it clearer.
handrews commentedon Jun 21, 2024
PR merged for 3.0.4 and ported to 3.1.1 via PR #3921!