Describe achieved security properties with this solution.

[gloinul]

I think it is important that this specification actually are explicit on which security properties it actual achieves. It will makes it easier to discuss if the document achieves what is claims to achieve it there is actually a set of properties to consider. Otherwise I think the reviewers assumption on what is possible might make people easily talk past each other.

[fluffy]

• - Need to define overall threat model (which will include compromised relays)
• - Attacks where a relay with fanout can try different forgeries to each downstream subscriber
• - Risk of violating publishing the object with same key, namespace , trackname, group id , object id but different data
• - Limitations in detecting relays that do not forward objects that should be forwarded
• - Limits on range of group and object IDs