Hacker News Reader

Yes, I do. You should be following de-facto real world standards, not fantasy ones. Especially if security is involved.

If there are de facto real world standards, why not write them down?

Ask the guys writing the RFC's, not me. Boggles my mind too.

Have you considered replacing/creating/updating RFCs/BCPs relevant to your field?