Be ye not afraid -- I have reviewed this document as part of the
security directorate's ongoing effort to review all IETF documents
being processed by the IESG.  These comments were written primarily
for the benefit of the security area directors.  Document editors and
WG chairs should treat these comments just like any other last call
comments.


Disclaimer: Math is hard. Let's go shopping...

Gadzooks! This draft is full of complex sounding things that I know
nothing about. That said, I found it interesting -- I still don't
understand the half of it, but it sure sounded good :-)

I see no operational concerns here (other than physical ones -- if I
publish the location of my datacenter with small uncertainty some folk
may be more likely to drive over and try actually find it...) This is
a serious reach though...

I suspect that someone with more privacy clue should review / comment.

W

-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf