[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: MUST vs. SHOULD audit
> My feeling is that auditing is a local matter and not part of the
> protocol.
I have to agree with Dan on this one. *I* have logging facilities and will
do my best to log where I can. OTOH, a small system, like a router or
perhaps a Javastation, won't necessarily have all of these capabilities.
> there should be mention of it as a security recommendation in the drafts,
Great idea! This is the sort of issue the _Security Recommendations_ are
for.
Dan McD. (disambiguating token added)