<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
]>
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
<!-- generated by https://github.com/cabo/kramdown-rfc version 1.7.17 (Ruby 3.3.3) -->
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" ipr="trust200902" docName="draft-ecahc-moderation-01" category="bcp" consensus="true" submissionType="IETF" tocInclude="true" sortRefs="true" symRefs="true" version="3">
  <!-- xml2rfc v2v3 conversion 3.22.0 -->
  <front>
    <title>IETF Community Moderation</title>
    <seriesInfo name="Internet-Draft" value="draft-ecahc-moderation-01"/>
    <author initials="L." surname="Eggert" fullname="Lars Eggert">
      <organization>Mozilla</organization>
      <address>
        <postal>
          <street>Stenbergintie 12 B</street>
          <city>Kauniainen</city>
          <code>02700</code>
          <country>FI</country>
        </postal>
        <email>lars@eggert.org</email>
        <uri>https://eggert.org/</uri>
      </address>
    </author>
    <author initials="A." surname="Cooper" fullname="Alissa Cooper">
      <organization abbrev="KGI">Knight-Georgetown Institute (KGI)</organization>
      <address>
        <email>alissa.cooper@georgetown.edu</email>
      </address>
    </author>
    <author initials="J." surname="Arkko" fullname="Jari Arkko">
      <organization>Ericsson</organization>
      <address>
        <postal>
          <city>Kauniainen</city>
          <code>02700</code>
          <country>FI</country>
        </postal>
        <email>jari.arkko@ericsson.com</email>
      </address>
    </author>
    <author initials="R." surname="Housley" fullname="Russ Housley">
      <organization>Vigil Security</organization>
      <address>
        <email>housley@vigilsec.com</email>
      </address>
    </author>
    <author initials="B." surname="Carpenter" fullname="Brian E. Carpenter">
      <organization abbrev="Univ. of Auckland">The University of Auckland</organization>
      <address>
        <postal>
          <extaddr>School of Computer Science</extaddr>
          <street>PB 92019</street>
          <city>Auckland</city>
          <code>1142</code>
          <country>NZ</country>
        </postal>
        <email>brian.e.carpenter@gmail.com</email>
      </address>
    </author>
    <date year="2024" month="July" day="03"/>
    <abstract>
      <?line 81?>

<t>This document describes the creation of a moderator team for all of the
IETF's various contribution channels. Without removing existing responsibilities
for working group management, this team enables a uniform approach to moderation
of disruptive participation across all mailing lists and other methods of IETF
collaboration.</t>
    </abstract>
    <note removeInRFC="true">
      <name>About This Document</name>
      <t>
        The latest revision of this draft can be found at <eref target="https://larseggert.github.io/moderation/draft-ecahc-moderation.html"/>.
        Status information for this document may be found at <eref target="https://datatracker.ietf.org/doc/draft-ecahc-moderation/"/>.
      </t>
      <t>
        Discussion of this document takes place on the
        gendispatch Working Group mailing list (<eref target="mailto:gendispatch@ietf.org"/>),
        which is archived at <eref target="https://mailarchive.ietf.org/arch/browse/gendispatch/"/>.
        Subscribe at <eref target="https://www.ietf.org/mailman/listinfo/gendispatch/"/>.
      </t>
      <t>Source for this draft and an issue tracker can be found at
        <eref target="https://github.com/larseggert/moderation"/>.</t>
    </note>
  </front>
  <middle>
    <?line 89?>

<section anchor="introduction">
      <name>Introduction</name>
      <t>This document proposes the creation of a moderator team for all of the
IETF's various contribution channels. This moderator team is modeled
after, and subsumes, the moderator team for the IETF discussion list
<xref target="RFC9245"/>.</t>
    </section>
    <section anchor="conventions-and-definitions">
      <name>Conventions and Definitions</name>
      <t>The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted in their normal English sense; they are shown
in uppercase for emphasis and clarity.</t>
      <aside>
        <t>TODO: Get feedback from the community whether this redefinition of BCP14
terms in process documents is something they support.</t>
      </aside>
    </section>
    <section anchor="motiv">
      <name>Motivation</name>
      <t>The IETF community has defined general guidelines of conduct for
personal interaction in the IETF <xref target="RFC7154"/>, and the IESG has
defined an anti-harassment policy for the IETF <xref target="AHP"/> for which the IETF
community has defined anti-harassment procedures <xref target="RFC7776"/>,
empowering an ombudsteam <xref target="OT"/> to take necessary action.</t>
      <t>Dealing with <em>disruptive</em> behavior, however, is not part of the role
of the ombudsteam. <xref target="RFC3934"/> tasks the chairs of each IETF working
group with moderating their group's in-person meetings and mailing
lists, and an IESG statement <xref target="MODML"/> describes additional guidance
to working group chairs about how - but not when - to moderate their
lists.</t>
      <t>For IETF mailing lists not associated with a working group, another
IESG statement <xref target="DP"/> clarifies that the list administrators are
tasked with moderation. And the IETF list for general discussions
has, mostly for historic reasons, a team of moderators that are not
list administrators and operate by a different set of processes
<xref target="RFC9245"/>.</t>
      <t>Note that the term "moderation" can refer both to <em>preemptive</em>
moderation, where moderators review attempted participation before it occurs
(such as reviewing messages to a mailing list), and <em>reactive</em> moderation,
where moderators intervene after problematic participation has occurred. The
IETF historically mainly practiced reactive moderation, with a spectrum from
gentle reminders on- and off-list, all the way to suspension of posting rights
and other ways of participating or communicating. It is up to the moderator
team to decide which mix of preemptive and reactive moderation to employ as
part of their processes.</t>
      <t>In addition, <xref target="RFC3683"/> defines a process for revoking an
individual's posting rights to IETF mailing lists following a
community last-call of a "posting rights" action (PR-action) proposed
by the IESG, often in response to complaints from the community.</t>
      <t>This fractured approach to moderation of disruptive participation
through chairs, list administrators, and moderator teams, combined
with the IESG-led process of PR-actions, has proven to be less than
ideal:</t>
      <ul spacing="normal">
        <li>
          <t>The IETF community has not been able to agree on a common definition
of disruptive behavior. Therefore, chairs and list administrators
apply individually different criteria when making decisions, and
participants have different expectations for when PR-actions are
warranted.</t>
        </li>
        <li>
          <t>The moderation process that chairs and list administrators need to
follow <xref target="RFC3934"/> is slow and cumbersome, which makes it
ill-suited to situations that escalate quickly. It also assumes
that the originator of disruptive behavior is a misguided
participant who can be reasoned with and who will change their
ways.</t>
        </li>
        <li>
          <t>Chairs and list administrators may only enact moderation actions for
their single list, which is ill-suited when a pattern of disruptive
behavior spans multiple lists. Also, chairs and list administrators
may not be fully aware of disruptive behavior that spans multiple
lists, due to not being subscribed to some of the affected.</t>
        </li>
        <li>
          <t>PR-actions, which can address disruptive behavior across several
lists, are cumbersome and slow, and the community has not been able
to agree on a common definition of disruptive behavior. This has
led to a situation where PR-actions are rarely used, and when they
are used, they are perceived as very heavy-handed.</t>
        </li>
        <li>
          <t>For a given mailing list, participants may not feel comfortable
reporting disruptive behavior to a chair or list administrator, for
various reasons. For mailing lists not associated with working
groups, list administrators are not even publicly identified - they
can only be contacted through an anonymous alias address. This
exacerbates the problem, because participants may not be
comfortable reporting disruptive behavior to an anonymous party.</t>
        </li>
        <li>
          <t>The IETF offers participation not only through in-person meetings
and mailing lists, which are the two channels of participation for
which moderation processes are currently defined. IETF business
also happens in chat channels, remote meeting participation
systems, virtual meetings, wikis, GitHub repositories, and more.
How disruptive behavior is moderated in these channels is currently
undefined.</t>
        </li>
      </ul>
    </section>
    <section anchor="ietf-moderator-team">
      <name>IETF Moderator Team</name>
      <t>This document proposes a different, uniform approach to moderating the
IETF's various participation channels: a moderator team for the IETF.
The creation of this team intends to address the issues identified
in <xref target="motiv"/>.</t>
      <section anchor="scope">
        <name>Scope</name>
        <t>The IETF moderator team consists of a number of individuals
that SHALL moderate all the IETF's various
current and future participation channels. At present, these include
mailing lists, chat channels, and discussions in other systems that
the IETF or WGs have chosen to employ, such as GitHub repositories,
Wikis, or issue trackers.</t>
        <t>The moderator team consists of no less than five individuals,
to establish some minimum basis for consensus-based team decisions
and geographic spread, but realistically needs to have several more
members to spread the moderation load and provide redundancy
in the cases of absences, etc. It is up to the moderator team to determine
a useful team size.</t>
        <t>It is not expected that the moderator team will be monitoring every
IETF channel, but rather that participants MAY and chairs SHOULD flag
concerns about disruptive behavior to the moderator team. However,
the moderator team SHOULD actively monitor a small set of key
participation channels, including, for example, the IETF discussion
and last-call mailing lists or the IETF plenary chat channel. The
moderator team should decide which channels are in this set based on
their own judgment and community suggestions. (Note that some participation
channels, such as the examples given in the previous sentence, have no
chairs or other community leadership, so the moderation team MUST handle those.)</t>
        <t>It is important to note that the moderation team only
moderates <em>public</em> IETF participation channels. Their mandate does
not extend to problematic behavior in private channels, such as
private chat channels, direct messages, or conversations or other
interactions outside of meetings. In such cases, the Ombudsteam
should be approached.</t>
        <t>The management and moderation of participation channels associated
with various IETF groups, inculding their mailing lists, chat
channels and in-person, remote, or interim meetings remains primarily a
task of the relevant group's management, such as WG chairs. However,
moderators are available for consultation and
assistance should issues arise, and they MAY proactively confer with the group
management over potential patterns of behavior. Group participants MAY
and chairs SHOULD alert the moderators to problematic behavior. When moderators
observe or are alerted to problematic behavior on such channels, they
SHOULD consult with the group's management to jointly determine an
appropriate moderation response. The moderation team should respect
the views of the group management in such cases, and the group
management should respect the moderation team's task of upholding an
overall IETF-wide uniformity for moderation.</t>
        <t>The moderator team MAY initiate moderation actions by itself;
individual participants SHOULD also alert the team to disruptive
behavior they observe. Participants should be able to contact the
moderator team in ways that are, ideally, integrated into the various
participation channels the IETF offers. The moderator team SHALL keep
the identities of participants requesting moderation confidential.</t>
      </section>
      <section anchor="transparency">
        <name>Transparency</name>
        <t>The moderator team SHALL operate according to a consistent
set of criteria, processes, and actions. The moderator team SHALL
independently define and execute their role. They SHALL maintain a
public set of moderation criteria, processes, actions, and other
material that allows the community to understand and comment on the
role of the team. The moderator team SHOULD consider adopting
moderation criteria, processes, and actions that other technical
communities have found suitable. The moderator team's criteria and
processes SHALL be developed with community input, but they are not
expected to be documented in the RFC series.</t>
        <t>Some of these processes may rely on automated mechanisms, such as
rate-limiting emails to lists or messages to chat channels.
(The IETF's deliberately low bar to participation makes it easy to
create throw-away personas for such denial-of-service behavior.)</t>
        <aside>
          <t>TODO: This gives the moderator team broad freedom to define
  processes and actions. Should this document define some boundaries
  for what the moderator team can do?</t>
        </aside>
        <t>The moderator team SHOULD create and maintain a public mailing list
for the community to discuss both the general moderation criteria and
individual moderation decisions. To not distract from the
topic-oriented discussion on other IETF lists, such meta-discussions
SHOULD be actively redirected to the moderation discussion list.</t>
      </section>
      <section anchor="membership">
        <name>Membership</name>
        <t>The IETF Chair appoints and replaces members of the moderator team.
Apart from appointing and replacing moderators, the IETF Chair SHALL
refrain from the day-to-day operation and management of the moderator
team. The moderator team MAY decide to consult with the IETF Chair
when needed.</t>
        <t>Because the IESG and IAB are in the appeals chain for moderator team
decisions (see <xref target="appeals"/>), the IETF Chair MUST NOT appoint a
moderator who is serving on the IESG or IAB. Individuals serving on
other bodies to which the NomCom appoints members, such as the IETF
Trust or the LLC Board, as well as LLC staff and contractors SHALL
also be excluded from serving on the moderator team. If a moderator
is assuming any such role, they SHALL step down from the moderator team
soon after.</t>
      </section>
      <section anchor="training">
        <name>Training</name>
        <t>The IETF is committed to providing and/or funding training for
appointed moderators as necessary. The IETF Chair will negotiate any
required funding or resources with IETF Administration LLC
<xref target="RFC8711"/>.</t>
      </section>
      <section anchor="appeals">
        <name>Appeals</name>
        <t>Because the moderator team serves at the discretion of the IETF Chair,
any moderation decision can be appealed to the IETF Chair by anyone,
per <xref target="RFC2026"/>. Disagreements with a decision by the IETF Chair can
brought to their attention. If this does not lead to a resolution, a
decision by the IETF Chair can be appealed as described in
<xref target="RFC2026"/>, as with any other Area Director decision. In this case,
the appeals chain starts with an appeal to the entire IESG.</t>
      </section>
      <section anchor="team-diversity">
        <name>Team Diversity</name>
        <t>Due to the global nature of the IETF, the membership of this team
SHOULD reflect a diversity of time zones and other participant
characteristics that lets it operate effectively around the clock and
throughout the year. Ideally, the moderator team should be able to
respond to issues within a few hours.</t>
        <t>Team diversity is also important to ensure any participant observing
problematic behavior can identify a moderator they feel comfortable
contacting.</t>
      </section>
      <section anchor="relation-to-the-ombudsteam">
        <name>Relation to the Ombudsteam</name>
        <t>The moderator team SHALL complement the efforts of the IETF
ombudsteam <xref target="OT"/>, whose focus on anti-harassment and operation
SHALL remain unchanged. The moderator team and ombudsteam are
expected to work together in cases that may involve both disruptive
behavior and harassment; they may determine the most effective way to
do so in each case. For example, the ombudsteam MAY decide to have
one of their members serve as a liaison to the moderator team.</t>
        <t>The ombudsteam has strict rules of confidentiality. If a moderation
case overlaps with an ombudsteam case, confidential information MUST
NOT be shared between the teams.</t>
      </section>
      <section anchor="relation-to-the-ietf-llc">
        <name>Relation to the IETF LLC</name>
        <t>The Board of Directors of the IETF Administration LLC (IETF LLC) has
fiduciary duty for the overall organization, which includes the duty
to protect the organization from legal risk that may arise from
illegal, vulgar, or manifestly harassing behavior of IETF participants.</t>
        <t>This protection MAY include the need for the LLC to take emergency moderation
actions. These emergency actions are expected to be extremely rare, of temporary
nature, and the indicdents that required them SHOULD be immediately raised with
the moderator team to let them determine any follow-up or more permanent
moderation action. These incidents and the taken emergency action SHOULD also be
communitated to the IETF community.</t>
      </section>
    </section>
    <section anchor="changes-to-existing-rfcs">
      <name>Changes to Existing RFCs</name>
      <t>Creation of the IETF moderator team requires some changes to existing
RFCs and also requires the IESG to update a number of their
statements. This section describes these changes.</t>
      <aside>
        <t>TODO: Add once we know this I-D will go forward in some form.</t>
      </aside>
    </section>
    <section anchor="security-considerations">
      <name>Security Considerations</name>
      <t>The usual security considerations <xref target="RFC3552"/> do not apply to this
document.</t>
      <t>Potential abuse of the moderation process for the suppression of
undesired opinions is counteracted by the availability of an appeals
process, per <xref target="appeals"/>.</t>
      <t>The actions of the moderation team are intended to limit the likelihood
of disruptive behavior by a few IETF participants from discouraging
participation by other IETF participants.</t>
    </section>
    <section anchor="iana-considerations">
      <name>IANA Considerations</name>
      <t>This document has no IANA actions.</t>
    </section>
    <section anchor="acknowledgments">
      <name>Acknowledgments</name>
      <t>These individuals suggested improvements to this document:</t>
      <ul spacing="normal">
        <li>
          <t>Chris Box</t>
        </li>
        <li>
          <t>Eric Rescorla</t>
        </li>
        <li>
          <t>Jay Daley</t>
        </li>
        <li>
          <t>Melinda Shore</t>
        </li>
        <li>
          <t>Michael Richardson</t>
        </li>
        <li>
          <t>Rich Salz</t>
        </li>
        <li>
          <t>Joel Halpern</t>
        </li>
      </ul>
    </section>
  </middle>
  <back>
    <references>
      <name>References</name>
      <references anchor="sec-normative-references">
        <name>Normative References</name>
        <reference anchor="RFC7776">
          <front>
            <title>IETF Anti-Harassment Procedures</title>
            <author fullname="P. Resnick" initials="P." surname="Resnick"/>
            <author fullname="A. Farrel" initials="A." surname="Farrel"/>
            <date month="March" year="2016"/>
            <abstract>
              <t>IETF Participants must not engage in harassment while at IETF meetings, virtual meetings, or social events or while participating in mailing lists. This document lays out procedures for managing and enforcing this policy.</t>
              <t>This document updates RFC 2418 by defining new working group guidelines and procedures. This document updates RFC 7437 by allowing the Ombudsteam to form a recall petition without further signatories.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="25"/>
          <seriesInfo name="RFC" value="7776"/>
          <seriesInfo name="DOI" value="10.17487/RFC7776"/>
        </reference>
        <reference anchor="RFC2026">
          <front>
            <title>The Internet Standards Process -- Revision 3</title>
            <author fullname="S. Bradner" initials="S." surname="Bradner"/>
            <date month="October" year="1996"/>
            <abstract>
              <t>This memo documents the process used by the Internet community for the standardization of protocols and procedures. It defines the stages in the standardization process, the requirements for moving a document between stages and the types of documents used during this process. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="9"/>
          <seriesInfo name="RFC" value="2026"/>
          <seriesInfo name="DOI" value="10.17487/RFC2026"/>
        </reference>
      </references>
      <references anchor="sec-informative-references">
        <name>Informative References</name>
        <reference anchor="AHP" target="https://www.ietf.org/about/groups/iesg/statements/anti-harassment-policy/">
          <front>
            <title>IETF Anti-Harassment Policy</title>
            <author>
              <organization>IESG</organization>
            </author>
            <date year="2013" month="November" day="03"/>
          </front>
        </reference>
        <reference anchor="OT" target="https://www.ietf.org/contact/ombudsteam/">
          <front>
            <title>Ombudsteam</title>
            <author>
              <organization/>
            </author>
            <date/>
          </front>
        </reference>
        <reference anchor="MODML" target="https://www.ietf.org/about/groups/iesg/statements/mailing-lists-moderation/">
          <front>
            <title>IESG Guidance on the Moderation of IETF Working Group Mailing Lists</title>
            <author>
              <organization>IESG</organization>
            </author>
            <date year="2000" month="August" day="29"/>
          </front>
        </reference>
        <reference anchor="DP" target="https://www.ietf.org/about/groups/iesg/statements/disruptive-posting/">
          <front>
            <title>IESG Statement on Disruptive Posting</title>
            <author>
              <organization>IESG</organization>
            </author>
            <date year="2006" month="February" day="16"/>
          </front>
        </reference>
        <reference anchor="RFC9245">
          <front>
            <title>IETF Discussion List Charter</title>
            <author fullname="L. Eggert" initials="L." surname="Eggert"/>
            <author fullname="S. Harris" initials="S." surname="Harris"/>
            <date month="June" year="2022"/>
            <abstract>
              <t>The Internet Engineering Task Force (IETF) discussion mailing list furthers the development and specification of Internet technology through the general discussion of technical, procedural, operational, and other topics for which no dedicated mailing lists exist. As this is the most general IETF mailing list, considerable latitude in terms of topics is allowed, but there are posts and topics that are unsuitable for this mailing list. This document defines the charter for the IETF discussion list and explains its scope.</t>
              <t>This document obsoletes RFC 3005 and updates RFC 3683.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="45"/>
          <seriesInfo name="RFC" value="9245"/>
          <seriesInfo name="DOI" value="10.17487/RFC9245"/>
        </reference>
        <reference anchor="RFC7154">
          <front>
            <title>IETF Guidelines for Conduct</title>
            <author fullname="S. Moonesamy" initials="S." role="editor" surname="Moonesamy"/>
            <date month="March" year="2014"/>
            <abstract>
              <t>This document provides a set of guidelines for personal interaction in the Internet Engineering Task Force. The guidelines recognize the diversity of IETF participants, emphasize the value of mutual respect, and stress the broad applicability of our work.</t>
              <t>This document is an updated version of the guidelines for conduct originally published in RFC 3184.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="54"/>
          <seriesInfo name="RFC" value="7154"/>
          <seriesInfo name="DOI" value="10.17487/RFC7154"/>
        </reference>
        <reference anchor="RFC3934">
          <front>
            <title>Updates to RFC 2418 Regarding the Management of IETF Mailing Lists</title>
            <author fullname="M. Wasserman" initials="M." surname="Wasserman"/>
            <date month="October" year="2004"/>
            <abstract>
              <t>This document is an update to RFC 2418 that gives WG chairs explicit responsibility for managing WG mailing lists. In particular, it gives WG chairs the authority to temporarily suspend the mailing list posting privileges of disruptive individuals. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="25"/>
          <seriesInfo name="RFC" value="3934"/>
          <seriesInfo name="DOI" value="10.17487/RFC3934"/>
        </reference>
        <reference anchor="RFC3683">
          <front>
            <title>A Practice for Revoking Posting Rights to IETF Mailing Lists</title>
            <author fullname="M. Rose" initials="M." surname="Rose"/>
            <date month="March" year="2004"/>
            <abstract>
              <t>All self-governing bodies have ways of managing the scope of participant interaction. The IETF uses a consensus-driven process for developing computer-communications standards in an open fashion. An important part of this consensus-driven process is the pervasive use of mailing lists for discussion. Notably, in a small number of cases, a participant has engaged in a "denial-of-service" attack to disrupt the consensus-driven process. Regrettably, as these bad faith attacks become more common, the IETF needs to establish a practice that reduces or eliminates these attacks. This memo recommends such a practice for use by the IETF. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="83"/>
          <seriesInfo name="RFC" value="3683"/>
          <seriesInfo name="DOI" value="10.17487/RFC3683"/>
        </reference>
        <reference anchor="RFC8711">
          <front>
            <title>Structure of the IETF Administrative Support Activity, Version 2.0</title>
            <author fullname="B. Haberman" initials="B." surname="Haberman"/>
            <author fullname="J. Hall" initials="J." surname="Hall"/>
            <author fullname="J. Livingood" initials="J." surname="Livingood"/>
            <date month="February" year="2020"/>
            <abstract>
              <t>The IETF Administrative Support Activity (IASA) was originally established in 2005. In the years since then, the needs of the IETF evolved in ways that required changes to its administrative structure. The purpose of this RFC is to document and describe the IETF Administrative Support Activity, version 2.0 (IASA 2.0). It defines the roles and responsibilities of the IETF Administration LLC Board (IETF LLC Board), the IETF Executive Director, and the Internet Society in the fiscal and administrative support of the IETF standards process. It also defines the membership and selection rules for the IETF LLC Board.</t>
              <t>This document obsoletes RFC 4071, RFC 4333, and RFC 7691.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="101"/>
          <seriesInfo name="RFC" value="8711"/>
          <seriesInfo name="DOI" value="10.17487/RFC8711"/>
        </reference>
        <reference anchor="RFC3552">
          <front>
            <title>Guidelines for Writing RFC Text on Security Considerations</title>
            <author fullname="E. Rescorla" initials="E." surname="Rescorla"/>
            <author fullname="B. Korver" initials="B." surname="Korver"/>
            <date month="July" year="2003"/>
            <abstract>
              <t>All RFCs are required to have a Security Considerations section. Historically, such sections have been relatively weak. This document provides guidelines to RFC authors on how to write a good Security Considerations section. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="72"/>
          <seriesInfo name="RFC" value="3552"/>
          <seriesInfo name="DOI" value="10.17487/RFC3552"/>
        </reference>
      </references>
    </references>
  </back>
  <!-- ##markdown-source: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-->

</rfc>
