While I think its a great start I wish it would include some more
practical work in some way like RASQ. The attack surface is subtly
different from the attack vector but in an important way. I haven't
seen any products implement it or heard about any corporations
require any services to deliver ...

[ more ]