[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: MUST vs. SHOULD audit



>   My feeling is that auditing is a local matter and not part of the
> protocol.

I have to agree with Dan on this one.  *I* have logging facilities and will
do my best to log where I can.  OTOH, a small system, like a router or
perhaps a Javastation, won't necessarily have all of these capabilities.

> there should be mention of it as a security recommendation in the drafts,

Great idea!  This is the sort of issue the _Security Recommendations_ are
for.

Dan McD.  (disambiguating token added)