Alphabetize Appendix B (High-Level Threats) (#148)

This is editorial and agreed on the call — merging. Thanks!

index.html

@@ -1620,18 +1620,40 @@
 These threats are an extension of the ones discussed by [[RFC6973]].
 
 <dl>
-<dt><dfn>Surveillance</dfn>
+<dt><dfn>Correlation</dfn>
 
-<dd> Surveillance is the observation or monitoring of an individual’s
-communications or activities. See <a
-data-cite="RFC6973#section-5.1.1">RFC6973§5.1.1</a>.
+<dd> Correlation is the combination of various pieces of information related to an
+    individual or that obtain that characteristic when combined. See
+    <a
+data-cite="RFC6973#section-5.2.1">RFC6973§5.2.1</a>.
 
 <dt>Data Compromise
 
 <dd> End systems that do not take adequate measures to secure data from
     unauthorized or inappropriate access. See <a
     data-cite="RFC6973#section-5.1.2">RFC6973§5.1.2</a>.
 
+<dt><dfn>Disclosure</dfn>
+
+<dd>Disclosure is the revelation of information about an individual that affects
+    the way others judge the individual. See <a
+data-cite="RFC6973#section-5.2.4">RFC6973§5.2.4</a>.
+
+<dt>Exclusion
+
+<dd>Exclusion is the failure to allow individuals to know about the data that
+    others have about them and to participate in its handling and use. See
+    <a
+data-cite="RFC6973#section-5.2.5">RFC6973§5.2.5</a>.
+
+<dt><dfn>Identification</dfn>
+
+<dd>Identification is the linking of information to a particular individual, even if the information
+isn't linked to that individual's real-world identity (e.g. their legal name, address, government ID
+number, etc.). Identifying someone allows a system to treat them differently from others, which can
+be [=inappropriate=] depending on the [=context=]. See
+<a data-cite="RFC6973#section-5.2.2">RFC6973§5.2.2</a>.
+
 <dt><dfn>Intrusion</dfn>
 
 <dd> [=Intrusion=] consists of invasive acts that disturb or interrupt one’s life or
@@ -1644,46 +1666,23 @@
     are attributed to another. See <a
 data-cite="RFC6973#section-5.1.4">RFC6973§5.1.4</a>.
 
-<dt><dfn>Correlation</dfn>
-
-<dd> Correlation is the combination of various pieces of information related to an
-    individual or that obtain that characteristic when combined. See
-    <a
-data-cite="RFC6973#section-5.2.1">RFC6973§5.2.1</a>.
-
 <dt>Profiling</dt>
 
 <dd>The inference, evaluation, or prediction of an individual's attributes, interests, or
 behaviours.</dd>
 
-<dt><dfn>Identification</dfn>
-
-<dd>Identification is the linking of information to a particular individual, even if the information
-isn't linked to that individual's real-world identity (e.g. their legal name, address, government ID
-number, etc.). Identifying someone allows a system to treat them differently from others, which can
-be [=inappropriate=] depending on the [=context=]. See
-<a data-cite="RFC6973#section-5.2.2">RFC6973§5.2.2</a>.
-
 <dt><dfn>Secondary Use</dfn>
 
 <dd> Secondary use is the use of collected information about an individual without
     the individual’s consent for a purpose different from that for which the
     information was collected. See <a
 data-cite="RFC6973#section-5.2.3">RFC6973§5.2.3</a>.
 
-<dt><dfn>Disclosure</dfn>
-
-<dd>Disclosure is the revelation of information about an individual that affects
-    the way others judge the individual. See <a
-data-cite="RFC6973#section-5.2.4">RFC6973§5.2.4</a>.
-
-<dt>Exclusion
-
-<dd>Exclusion is the failure to allow individuals to know about the data that
-    others have about them and to participate in its handling and use. See
-    <a
-data-cite="RFC6973#section-5.2.5">RFC6973§5.2.5</a>.
+<dt><dfn>Surveillance</dfn>
 
+<dd> Surveillance is the observation or monitoring of an individual’s
+communications or activities. See <a
+data-cite="RFC6973#section-5.1.1">RFC6973§5.1.1</a>.
 </dl>
 
 These threats combine into the particular concrete threats we want web