Closed jyasskin closed 4 years ago
I think that, as a target threat model, we can have this document define "site" the way we want, and we'll plan to fix the resulting threat model violations over time and feature-by-feature.
Agreed. (Hah. I'd forgotten I was the one who filed the bug too.)
This requires a site to have a single scheme.
@davidben, how does this look?
Preview | Diff