{"action":"created","issue":{"url":"https://api.github.com/repos/adlnet/xAPI-Spec/issues/726","labels_url":"https://api.github.com/repos/adlnet/xAPI-Spec/issues/726/labels{/name}","comments_url":"https://api.github.com/repos/adlnet/xAPI-Spec/issues/726/comments","events_url":"https://api.github.com/repos/adlnet/xAPI-Spec/issues/726/events","html_url":"https://github.com/adlnet/xAPI-Spec/issues/726","id":97488145,"number":726,"title":"Rename § 6.4","user":{"login":"canweriotnow","id":387693,"avatar_url":"https://avatars.githubusercontent.com/u/387693?v=3","gravatar_id":"","url":"https://api.github.com/users/canweriotnow","html_url":"https://github.com/canweriotnow","followers_url":"https://api.github.com/users/canweriotnow/followers","following_url":"https://api.github.com/users/canweriotnow/following{/other_user}","gists_url":"https://api.github.com/users/canweriotnow/gists{/gist_id}","starred_url":"https://api.github.com/users/canweriotnow/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/canweriotnow/subscriptions","organizations_url":"https://api.github.com/users/canweriotnow/orgs","repos_url":"https://api.github.com/users/canweriotnow/repos","events_url":"https://api.github.com/users/canweriotnow/events{/privacy}","received_events_url":"https://api.github.com/users/canweriotnow/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/adlnet/xAPI-Spec/labels/patch","name":"patch","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/adlnet/xAPI-Spec/milestones/3","html_url":"https://github.com/adlnet/xAPI-Spec/milestones/1.0.3%20Document%20Restructure","labels_url":"https://api.github.com/repos/adlnet/xAPI-Spec/milestones/3/labels","id":1004036,"number":3,"title":"1.0.3 Document Restructure","description":"We need to split the document into more logical pieces.  We've talked about putting a generic \"how to follow this spec\" up front.  We also need to split out the Statement / AP responsibilities more clearly from those of the LRS.  Discussion of this will begin shortly, with resolution coming after the low-hanging issues being cleared up.  The date is very fluid, more or less out there to establish order among the milestones.","creator":{"login":"andyjohnson","id":1325035,"avatar_url":"https://avatars.githubusercontent.com/u/1325035?v=3","gravatar_id":"","url":"https://api.github.com/users/andyjohnson","html_url":"https://github.com/andyjohnson","followers_url":"https://api.github.com/users/andyjohnson/followers","following_url":"https://api.github.com/users/andyjohnson/following{/other_user}","gists_url":"https://api.github.com/users/andyjohnson/gists{/gist_id}","starred_url":"https://api.github.com/users/andyjohnson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andyjohnson/subscriptions","organizations_url":"https://api.github.com/users/andyjohnson/orgs","repos_url":"https://api.github.com/users/andyjohnson/repos","events_url":"https://api.github.com/users/andyjohnson/events{/privacy}","received_events_url":"https://api.github.com/users/andyjohnson/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":5,"state":"open","created_at":"2015-03-03T14:00:54Z","updated_at":"2015-09-16T16:02:13Z","due_on":"2015-05-09T04:00:00Z","closed_at":null},"comments":4,"created_at":"2015-07-27T15:20:10Z","updated_at":"2015-10-07T19:05:42Z","closed_at":null,"body":"Apropos of @andyjohnson's [comment](https://github.com/adlnet/xAPI-Spec/pull/707#discussion_r33710520) in #707 (my follow-up [here](https://github.com/adlnet/xAPI-Spec/pull/707#discussion_r35506444)), and following indirectly from #725:\r\n\r\nAs it's been made explicitly clear on several occasions that infosec concerns are more or less orthogonal to the xAPI spec itself, I propose that § [6.4 Security](https://github.com/adlnet/xAPI-Spec/blob/master/xAPI.md#64-security) be renamed to \"6.4 Authentication\" or _maybe_ authorization (but that's a stretch), as it really only describes mechanisms of client authentication and really has little to do with security _qua_ security; at the very least, the title might mislead naïve readers to assume that the provisions in 6.4 provide security guarantees, which is at best laughable and at worst downright dangerous. \r\n\r\nIn addition to disambiguating the intent and capabilities of the provisions in §6.4 by renaming it, I think it would be prudent to explicitly state in the same section that xAPI does _not_ directly address security, and implementors should follow industry best practices to achieve the level of security they require.\r\n\r\nAgain, I'd be happy to write the PR, posting issue for feedback."},"comment":{"url":"https://api.github.com/repos/adlnet/xAPI-Spec/issues/comments/146296578","html_url":"https://github.com/adlnet/xAPI-Spec/issues/726#issuecomment-146296578","issue_url":"https://api.github.com/repos/adlnet/xAPI-Spec/issues/726","id":146296578,"user":{"login":"fugu13","id":51579,"avatar_url":"https://avatars.githubusercontent.com/u/51579?v=3","gravatar_id":"","url":"https://api.github.com/users/fugu13","html_url":"https://github.com/fugu13","followers_url":"https://api.github.com/users/fugu13/followers","following_url":"https://api.github.com/users/fugu13/following{/other_user}","gists_url":"https://api.github.com/users/fugu13/gists{/gist_id}","starred_url":"https://api.github.com/users/fugu13/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fugu13/subscriptions","organizations_url":"https://api.github.com/users/fugu13/orgs","repos_url":"https://api.github.com/users/fugu13/repos","events_url":"https://api.github.com/users/fugu13/events{/privacy}","received_events_url":"https://api.github.com/users/fugu13/received_events","type":"User","site_admin":false},"created_at":"2015-10-07T19:05:42Z","updated_at":"2015-10-07T19:05:42Z","body":"Something like this sounds good"}}