Add: requirement that authn can be limited by time, IP address

1 files changed, 4 insertions, 0 deletions

diff --git a/yuck.mdwn b/yuck.mdwn
index a5aebec..2d15caf 100644
--- a/yuck.mdwn
+++ b/yuck.mdwn
@@ -229,6 +229,10 @@ reference in discussions.
   can be easily replaced. The IDP MUST have a secure way to distribute
   the key to clients.
 
+* (AUTHLIMIT) Authentication MUST be possible to limit by time or IP
+  address.
+
+
 
 # Architecture: the ecosystem