[mediacapture-main] PING: Refer to security-arch on the MUST inside Best Practice for HTTPS

alvestrand has just created a new issue for 
https://github.com/w3c/mediacapture-main:

== PING: Refer to security-arch on the MUST inside Best Practice for 
HTTPS ==
The "best practice" on storing permissions in section 10.6 
"Implementation suggestions" has a MUST in it. It should be rephrased 
to make it clear that it's saying that security-arch section 5.2 has 
the MUST, and that it's quoting it, not establishing a new 
requirement.

This also requires adding security-arch to references, and making the 
reference normative.

(The alternative is to move it to a place where normative text is 
appropriate.)



See https://github.com/w3c/mediacapture-main/issues/250