Re: [quicwg/base-drafts] Add initial threat model to security considerations (#2925)

mirjak <notifications@github.com> Fri, 25 October 2019 14:21 UTC

Date: Fri, 25 Oct 2019 07:21:18 -0700
From: mirjak <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+AFTOJK6RULJPN2CLF6KDAHV3YBCW5EVBNHHBYGSUE4@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/2925/c546374184@github.com>
In-Reply-To: <quicwg/base-drafts/pull/2925@github.com>
References: <quicwg/base-drafts/pull/2925@github.com>
Subject: Re: [quicwg/base-drafts] Add initial threat model to security considerations (#2925)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5db304de446c4_4ea53ffd7cecd95c10757f"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/kPStBINVBLj9W_zl4cNRTKmkhq8>

I just had a quick read, and this looks fine (maybe there is an option to remove some redundancy but not sure). However, I would have expected that this would also talk about likability. Or do we already cover hat somewhere else? More generally I think it would be helpful to add some text at the beginning to not only define the attackers capabilities but also its intention, so the (goal of) the attack itself.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2925#issuecomment-546374184

[quicwg/base-drafts] Add initial threat model app… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Nick Banks
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Dmitri Tikhonov
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… ianswett
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… mirjak
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Gorry Fairhurst
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… ianswett
Re: [quicwg/base-drafts] Add initial threat model… Jana Iyengar
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… MikkelFJ
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… MikkelFJ