Categories
Software and Programming

What’s Your Threat Model?

WYTM is part of Ian Grigg’s SSL Considered Harmful rant collection. His point is that SSL’s assumptions (that "man in the middle" attacks are a threat, but the client and server are secure) are wrong: clients and servers are constantly port-scanned, hacked and infected with viruses, while what’s sent over the line is pretty much unmolested.
Except he says it much better.

(Link via Kevin Marks)