CSAF 2.0 Specification: Unclear scope & method for security sanitizing of CSAF documents

As discussed in today s TC meeting.


  Call to action. Please review the issue documented at:
 https://github.com/oasis-tcs/csaf/issues/174


  Provide your comments either here in this email thread or directly to GitHub.


  Thank you!



  Regards,


  Omar Santos
  PSIRT, Security Research and Operations
  Cisco Systems
Email: 
PGP: https://keybase.io/santosomar