Define Security Goals

[PieterKas]

Commenting as identity enthusiast as opposed to WIMSE co-chair.

It would be beneficial for readers, as well as future attempts at formal analysis, to have a section that explicitly defines the security goals for this draft.

[bc-pi]

Hard to disagree with this. But also hard to actually do it (speaking for myself anyway). Do you have any pointers to places elsewhere where this has been done well?