Dave Crocker wrote:
AD review appears to miss far more than it catches. That's seems to be
difficult for some folk to accept, and so they point to the individual
exceptions rather than the longer pattern of misses. (By way of some
very strategic examples, consider IPv6 and DNSSec and email security and
key management and...)
Do you have data on this? This doesn't match my experience. I've found AD
review to be very helpful. It's certainly inconvenient, but I've seen AD
reviews catch lots of things that were worth catching. I would not go so far
as to claim that my anecdote is more valid than yours, but I think that if we
are going to make claims like this, we should probably back them up with data.
The current AD review process didn't just happen.