Dave Crocker wrote: > AD review appears to miss far more than it catches. That's seems to be > difficult for some folk to accept, and so they point to the individual > exceptions rather than the longer pattern of misses. (By way of some > very strategic examples, consider IPv6 and DNSSec and email security and > key management and...) Do you have data on this? This doesn't match my experience. I've found AD review to be very helpful. It's certainly inconvenient, but I've seen AD reviews catch lots of things that were worth catching. I would not go so far as to claim that my anecdote is more valid than yours, but I think that if we are going to make claims like this, we should probably back them up with data. The current AD review process didn't just happen.