Add areas to not write requirements for because someone else is (b944f1c9) · Commits · STAN4CRA / EN 304 620 Virtual Private Networks Part 1

clauses/5.Requirements.md

+19 −0

Original line number	Diff line number	Diff line
		@@ -170,6 +170,25 @@ The VPN client shall prevent DNS queries from bypassing the VPN connection via e
		\| DNS leaks \| MI-DNSL-1, MI-DNSL-2, MI-DNSL-3, MI-DNSL-4 \|
		\| Network misconfiguration \| MI-DNSL-2, MI-DNSL-3 \|

		## Notes - will go away in final version

		### Don't write generic technical requirements

		If you find yourself writing a technical requirement that does not seem to be specific to VPNs in any way, then please stop!

		The generic cross-vertical versions of the following requirements are a work in progress by other vertical rapporteurs. If a generic requirement isn't on this list, it should be.

		* General cryptography requirements
		* SBOM
		* RDPS Remote Data Processing Service
		* Vulnerability handling
		* Authentication
		* Logging
		* Secure Updates
		* Distribution of security functions

		### Areas of technical requirements still to be written

		### Logging

		Threat: someone (maybe VPN provider) gets access to remote logs