Re: do security recommendations belong in standard?

RFCs traditionally have that special section at the end called "Security."
Instead of the traditional phrase "This whole RFC is about security"
perhaps that is the right place to put security recommendations. This would
be more in line with other RFCs, wouldn't it?

Also, this would reflect a (previously misplaced and sorely missed)
recognition of the difference between security and security mechanisms.

Rick.
smith(_at_)securecomputing(_dot_)com