Commit in docs/usefor (usepro.xml)

    Date: Sunday, September 21, 2008 @ 19:11:06
  Author: eagle
Revision: 5045

Add informative references to PGP Moose and pgpverify, as requested by
the security review during Last Call.

Modified:
  docs/usefor/usepro.xml

Modified: docs/usefor/usepro.xml
===================================================================
--- docs/usefor/usepro.xml	2008-09-22 01:57:54 UTC (rev 5044)
+++ docs/usefor/usepro.xml	2008-09-22 02:11:06 UTC (rev 5045)
@@ -1726,7 +1726,8 @@
         standardized means of authenticating the sender of a control
         message or verifying that the contents of a control message were
         sent by the claimed sender.  There are, however, some
-        unstandardized authentication mechanisms in common use.</t>
+        unstandardized authentication mechanisms in common use, such as
+        <xref target="PGPVERIFY" />.</t>
 
         <t>Agents acting on control messages SHOULD take steps to
         authenticate control messages before acting on them, as
@@ -2120,7 +2121,10 @@
         SHOULD verify that messages approved for a moderated newsgroup are
         being injected by the moderator using authentication information
         from the underlying transport or some other authentication
-        mechanism arranged with the moderator.</t>
+        mechanism arranged with the moderator.  There is, at present, no
+        standardized method of authenticating approval of messages to
+        moderated groups, although some unstandardized authentication
+        methods such as <xref target="PGPMOOSE" /> are in common use.</t>
 
         <t>A malicious news server participating in a Netnews network may
         bypass checks performed by injecting agents, forge Path header
@@ -2259,6 +2263,29 @@
     </references>
 
     <references title="Informative References">
+      <reference anchor="PGPMOOSE" target="http://seer-grog.net/README">
+        <front>
+          <title>PGP Moose</title>
+          <author initials="G." surname="Rose" fullname="Greg Rose">
+            <organization>QUALCOMM</organization>
+          </author>
+          <date day="26" month="November" year="1998" />
+        </front>
+        <format type="TXT" target="http://seer-grog.net/README" />
+      </reference>
+      <reference anchor="PGPVERIFY"
+        target="ftp://ftp.isc.org/pub/pgpcontrol/FORMAT">
+        <front>
+          <title>Signing Control Messages</title>
+          <author initials="D." surname="Lawrence"
+            fullname="David C. Lawrence">
+            <organization>Internet Systems Consortium, Inc.</organization>
+          </author>
+          <date month="August" year="2001" />
+        </front>
+        <format type="TXT"
+          target="ftp://ftp.isc.org/pub/pgpcontrol/FORMAT" />
+      </reference>
       &rfc0976;
       &rfc1036;
       &rfc2045;