New answers tagged threat-modeling
RFC 5246 does include a threat model, but it is described very succinctly and quite informally. It is at the start of Appendix F: The TLS protocol is designed to establish a secure connection between a client and a server communicating over an insecure channel. This document makes several traditional assumptions, including that attackers have ...
Top 50 recent answers are included