Re: [Last-Call] Secdir last call review of draft-foudil-securitytxt-08

To: Rob Sayre <sayrer@xxxxxxxxx>, Tero Kivinen <kivinen@xxxxxx>
Subject: Re: [Last-Call] Secdir last call review of draft-foudil-securitytxt-08
From: "Salz, Rich" <rsalz@xxxxxxxxxx>
Date: Tue, 31 Dec 2019 14:38:23 +0000
Cc: "last-call@xxxxxxxx" <last-call@xxxxxxxx>, "draft-foudil-securitytxt.all@xxxxxxxx" <draft-foudil-securitytxt.all@xxxxxxxx>, "secdir@xxxxxxxx" <secdir@xxxxxxxx>
In-reply-to: <CAChr6SwMxi9VULdF9MKcHNqZGwX6Rv-AB72MCq2_pDmi4X2jVw@mail.gmail.com>
References: <157720267698.19361.11750709876624228448@ietfa.amsl.com> <CAChr6SwMxi9VULdF9MKcHNqZGwX6Rv-AB72MCq2_pDmi4X2jVw@mail.gmail.com>
User-agent: Microsoft-MacOutlook/10.20.0.191208

While the draft does spend some time describing the "Scope of the File", it doesn't address attacks against other parties using phone numbers or emails contained within the file.

Why is this file worse than any other file on any other web server on the Internet?

-- 
last-call mailing list
last-call@xxxxxxxx
https://www.ietf.org/mailman/listinfo/last-call

Follow-Ups:
- Re: [Last-Call] Secdir last call review of draft-foudil-securitytxt-08
  - From: Rob Sayre
- Re: [Last-Call] Secdir last call review of draft-foudil-securitytxt-08
  - From: Paul Wouters

References:
- [Last-Call] Secdir last call review of draft-foudil-securitytxt-08
  - From: Tero Kivinen via Datatracker
- Re: [Last-Call] Secdir last call review of draft-foudil-securitytxt-08
  - From: Rob Sayre