Skip to content
This repository has been archived by the owner on Jun 6, 2023. It is now read-only.

remove "trust" from specification documents #45

Open
david415 opened this issue Nov 15, 2018 · 2 comments
Open

remove "trust" from specification documents #45

david415 opened this issue Nov 15, 2018 · 2 comments

Comments

@david415
Copy link
Member

david415 commented Nov 15, 2018

user@computer:~/code/docs$ grep -r trust
specs/sphinx.rst:      ``additional_data`` element as trusted until after the completion
specs/end_to_end.rst:   reusing the existing trust relationship any given user may have
user@computer:~/code/docs$ 
@claucece
Copy link
Contributor

claucece commented Mar 3, 2019

Why should it be removed?

@david415
Copy link
Member Author

david415 commented Mar 3, 2019

The word trust in computer security discussions is inappropriate. Here's my reasoning:

Proposition 1: If A trusts B and B is compromised then A is also compromised.
Proposition 2: If A depends on B for confidentiality and B is compromised then A losses confidentiality.

In Proposition 1 the trust relationship means that B is totally compromised whereas in Proposition 2 B only looses confidentiality. Therefore it is best to replace sentences containing the word trust with phrases "depends on" to express the precise dependency relationship.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants