search

ietf-rats-wg / architecture

RATS Architecture
Other
17 stars 10 forks source link

section 12 seems silent on #378

Closed mcr closed 2 years ago

mcr commented 2 years ago

-- The overall Section 12 seems silent on:

o Endorsers and endorsements? o Reference values? o What is the implication of combining roles into a single entity as described in Section 3.4 and 6. Does this lack of separation present any additional issues? o Compositional devices per Section 3.3?

mcr commented 2 years ago

"If an attacker can modify appraisal policies, Endorsements, or Reference Values, then integrity of the process is compromised."