T2 Minor Inconsistency in Section 12.2

Line 1978 talks about three areas of the CPA that 
have security definitions. This is followed by only two bullets.

 

The first bullet says "The MSH is not 
responsible for any security specified at this level but may offer these 
services to the message sender". This seems contradictory. If the MSH offers 
these services, isn't it responsible for doing the necessary encryption and 
decryption? What does "not responsible for any security specified at this level" 
really mean?

 

The second bullet refers to a Message section in 
the CPA. No such section can be found in the schema (Appendix D in the CPPA 
spec).

 

-Arvola