Originally Posted by u-Bob

that statement contradicts the "Appendix B IFFOR Baseline Policies ":



You're saying IFFOR/ICM doesn't require access to password protected areas.
The IFFOR Policies documents say that you do require access to password protected areas.

Or do you not consider "password protection" to be a "means" to limit access to certain content?
If that's the case, there's no way for IFFOR/ICM to monitor an entire site for compliance with IFFOR policies (including the anti cp one) and the ICMs statement about guaranteeing that .xxx domains are free from cp become meaningless.