[g-b-r]

If it's documented it will be implemented by many more libraries and applications, that's the argument

[tptacek]

It already exists. In fact, there are environments where it has to exist. So the argument he's making is that the IETF should pretend it doesn't exist.

[g-b-r]

Can you (or someone else) please give some example of those environments?

[some_furry]

Telecoms.

I wrote at length about this debate in my blog post about threat modeling: https://soatok.blog/2026/06/30/soatoks-informal-guide-to-thr...