> (1) > * The proposed mechanism for reporting a vulnerability. the internet operational community focuses on what reporting facility a *provider* MUST provide, as opposed to restricting what means a reporter must use. Cf "abuse-c:" in ripe. in general, it is operationally strange that your draft seems so focused on obligations of the researcher as opposed to on the infrastructure provider. randy
