search

ietf-rats-wg / architecture

RATS Architecture
Other
16 stars 10 forks source link

rats foundational security assumption #379

Closed mcr closed 2 years ago

mcr commented 2 years ago

** Section 12.1.1 An essential value-add provided by RATS is for the Relying Party to be able to trust the Attester even if the user or owner is not trusted.

Is it more accurate to say that an "A foundational security assumption of a RATS architecture is that a Relying Party is able to trust the Attester even if the user or owner is not trusted"

mcr commented 2 years ago

Section 12.1.1 Is it more accurate to say that an "A foundational security assumption of a RATS architecture is that a Relying Party is able to trust the Attester even if the user or owner is not trusted"

I think the statement is closer to "A foundational security assumption of a RATS architecture it that a Relying Party is able to establish the basis for trusting the Attester functions, or Attester users.

mcr commented 2 years ago

Remove word "assumption", as this is an input, and we are talking about the output. move this sentence to the beginning of that section.

"The fundamental purpose of the RATS architecture is to allow a Relying Party to establish a basis for trusting the Attester."