Skip to content

Commit

Permalink
Respond to review comments
Browse files Browse the repository at this point in the history
  • Loading branch information
mfoltzgoogle committed Aug 28, 2019
1 parent 2a75005 commit 64a6856
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions index.bs
Expand Up @@ -1963,16 +1963,16 @@ persistent exploits.
User Interface Considerations {#security-ui}
-----------------------------

This specification does make any specific requirements of the security relevant
user interfaces of Open Screen agents. However there are important
This specification does not make any specific requirements of the security
relevant user interfaces of Open Screen agents. However there are important
considerations when designing these user interfaces, as PSK based authentication
requires users to make informed decisions about which agents to trust.

1. Before an agent has authenticated another device, the agent should make it
clear that any `agent-info` or other data from that device has not been
verified by authentication. (See below for how this applies to DNS-SD
Instance Names.)
1. An [=suspicious agent=] should be displayed differently from trusted
1. A [=suspicious agent=] should be displayed differently from trusted
agents that are not suspicious, or not displayed at all.
1. The user interface to input a PSK during authentication should be done in
trusted UI and be difficult to spoof.
Expand All @@ -1983,7 +1983,7 @@ requires users to make informed decisions about which agents to trust.

### Instance and Display Names ### {#instance-names}

Because DNS-SD [=Instance Names=] are the the primary information that the user
Because DNS-SD [=Instance Names=] are the primary information that the user
sees prior to authentication, careful presentation of these names is necessary.

Agents must treat Instance Names as unverified information, and should check
Expand Down

0 comments on commit 64a6856

Please sign in to comment.