The proposal raises a host of questions about the legality and practicality of bolstering the involvement of the private sector in offensive cyberoperations.