In your previous mail you wrote:
I'm OK with this text. I tried to come up with a way to briefly discuss
how error detection is very related to things like protecting against
substitution of content (the internet mirror case) but failed to come up
with something brief.
So, I'm fine with what you have.
=> can I conclude you are in the "they are security considerations so
don't talk about not-security uses" side?
PS: to summary the issue, we can do 3 things about new not-security uses:
- not discourage them as they don't raise any security problems
- discourage them as they can raise operational problems because
some crypto regulations banish MD5 by itself
- write nothing
Note the last option solves the issue only for this document,
i.e., each time a document will propose a new use of MD5 the issue
will be re-opened.
Ietf mailing list