Passive Observers Risk

[jasonanovak]

“Network Attacker” is a named adversary, but the attacker type doesn’t include a passive observer of network traffic that could try and determine patterns based on network traffic (e.g. https://gizmodo.com/the-house-that-spied-on-me-1822429852).

[ereshetova]

We have this attack described in "WoT Communication Threat - Side Channels" threat, but you are right, we should call out a passive network attacker in the "Network adversary" also.

[ereshetova]

The #90 addresses this by clarifying the Network attacker definition to include passive observation.

[mmccool]

This is now addressed in the document so we can close this issue.