Security Considerations: Writing Introduction
Following @johannhof's excellent introduction to privacy, here is the section on security considerations, with various points raised by @Sh-Amir and @ZAnsaroudi.
In particular:
- Use scenarios
- External Dependencies
- Assumptions
Lists of the threats, in progress
@simoneonofri this is marked as both draft and awaiting review. Should we start reviewing?
@marcoscaceres, thanks for the feedback. This is just the introduction section. Threats/mitigations are arriving.
We considered putting everything in one PR, but we thought doing smaller, more focused PRs would be more practical. Please let me know if you think there are more practical ways to talk about it.
We considered putting everything in one PR, but we thought doing smaller, more focused PRs would be more practical. Please let me know if you think there are more practical ways to talk about it.
Yes please. I think this was a good start, but it showed that the approach was overly broad.
Let's please do focused PRs instead.
@simoneonofri ok to close this?
@marcoscaceres yes thank you, followup here https://github.com/w3c-fedid/digital-credentials/wiki/Security-Considerations-Section