Problem description
The current security considerations just refers to CloudEvent "security".
Which is basically saying "CloudEvents cares about interoperability (and not about privacy and security)".
The example they provide does not even follow their own security advice.
Data
Domain specific event data SHOULD be encrypted to restrict visibility to trusted parties. The mechanism employed for such encryption is an agreement between producers and consumers and thus outside the scope of this specification.
Problem description The current security considerations just refers to CloudEvent "security". Which is basically saying "CloudEvents cares about interoperability (and not about privacy and security)".
The example they provide does not even follow their own security advice.
Note, despite their own recommendation
data
is not encrypted. Neither iscomexampleextension1
norcomexampleothervalue
.Expected behavior Write a meaningful security considerations section
Additional context