Comment by thayne

Better question, why was it not written so it could be updated by security experts without requiring new legislation.