Natural Key or Surrogate Key? The First Real Fork in the CVEs Table

Designing the cves table, I hit the first real decision that wasn't obvious: what's the primary key? CVE IDs look like a gift. They're unique, human-readable, and already assigned by someone else. CVE