Added more detailed information about the solution element; removed the suggestion element since the solution element can be used by both reporting entities and receiving entities; added notes about processing of incident reports by receiving entities.
If the reporting entity determines a solution to the problem, it MAY send out a revised incident report containing a <solution/> element.
+If the reporting entity determines a solution to the problem or a receiving entity has a suggested solution to the problem, it SHOULD send out a revised incident report containing a <solution/> element (or the reporting entity can include a solution in its initial report). The solution element can include any of the elements defined for the <description/> element, such as the <ip/> element (since the XMPP server of a source JID might know the IP address of the connected entity).
Further definition of the <solution/> element will be provided in a future version of this specification.
If an entity that receives an incident report has a suggested solution to the problem, it MAY send an incident message containing a <suggestion/> element.
-Further definition of the <suggestion/> element will be provided in a future version of this specification.
+Unless explicitly configured to do so, a receiving server SHOULD NOT automatically modify its configuration based on receipt of an incident report, even from a trusted server, but instead SHOULD prompt the human administrator(s) so that they can take appropriate action.
+A receiving server MAY accept incident reports from peers that are not on its "trust list", but SHOULD treat such reports with caution and provide them to the human administrator(s) of the server.
+A receiving server MAY forward reports that it receives to other servers it trusts