Skip to main content
Created: YYYY-MM-DDLast Updated: YYYY-MM-DDAuthor: Name

Summary

Short summary of the context, the current state, and the solution.

Context

What triggered this

Current state

Explain the current state.

Goals

  • One goal per line.

Out of scope

  • What this design will not do. Skip this section if you have nothing to list.

Options

Option 1 - …

Explain it more in details.

Security considerations

Always fill this in. If a point does not apply, write “None” and a short why. Do not delete the point. Keep things short.
  • Data in and out — what data people or systems send and receive.
  • Who can access it — who (person or system) can access this data.
  • Data we store — what data do we store and for how long.
  • Risks — how can this be abused and what remediations do we have.
Any risk identified above must be recorded as an entry in Freda’s risk register, with an owner and treatment plan, before this RFC is merged.