security doc - Definition of Trust

 

One of the issues that has come up on the reflector is that the
definition of Trust should be changed to "Partial Trust", with an
appropriate change to the definition. The existing draft defines trust
as:

 

Trust - When one party depends upon the other party to not subvert the
goals of the protocols, e.g., it will not attempt to perform the
following attacks: spoofing, repudiation, information disclosure, denial
of service, or elevation of privilege. 

An Untrusted peer is a party that may (or may not) attempt to perform
one or more of the above attacks. A partially trusted peer (either the
Local Peer or Remote Peer) may be trusted to not attempt to perform some
subset of the above attacks, but not trusted to perform a different
subset.

Possible new definition (feedback/wordsmithing appreciated - I want
general agreement on this before I go through the spec):

 

Partial Trust - When one party depends upon the other party to not
attempt to perform a specific attack or set of attacks. A partially
trusted peer (either the Local Peer or Remote Peer) may be trusted to
not attempt to perform any subset of the specific list of attacks.
However, there is no guarantee that the Peer won't try to perform a
different set of attacks.

An Untrusted peer is a party that may (or may not) attempt to perform
one or more of the listed set of attacks. 

Jim