Policy proposals are best made relative to a cybersecurity doctrine rather than suggested piecemeal as is being done today. A doctrine of deterrence through accountability, for example, would be a basis for rationalizing proposals that equate attacks with crimes and focus on network-wide authentication and identification mechanisms. A new doctrine of public cybersecurity is also discussed; its goals are producing cybersecurity and managing the remaining insecurity, where individual rights are balanced with public welfare.