[Ssr2-review] Please review the first 5 SSR1 recommendations for the call tomorrow

Russ Housley housley at vigilsec.com
Tue Sep 11 16:39:35 UTC 2018


> clarification: istme we might find it useful to modify the
> questions after we try to fill out the answers a few times.
> but it seems perfectly fine to start w these.  sooner is 
> better, i assume..
> btw ssac recently reviewed all ssac reports since 2010 or
> so, to see if they needed repeating/revisiting. similar
> goes but i think russ' questions are structured better.
> notably, we were each asked to volunteer to take on 1-5
> reports to review and provide judgement on. some overlap
> to get more than one pair of eyes. it took a few tries
> to convince earnest "volunteers" ;)    are we doing this
> kind of divide-and-conquer?

I think we need to see how easy or hard it is to reach consensus on the first few, and then once we have some agreement on the level of detail that needs to be in the table, we can assess the best way forward.


More information about the Ssr2-review mailing list