[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: forced VCAR (was: revised security section)




Yes, we are in agreement.

- C&S VCAR Policy specification by the CU is in the CAP.

- CAP could specify that an out-of-band method (i.e., not specified by the current CAP draft) could be used to set the VCAR such that a CU can't subsequently change it.

- CAP can also specify that a CS can set a calendar-wide VCAR that CUs can't modify.

The requirements for such features seem clear. Thank you for taking the time to answer.

-- Frank