4 Sep
2011
4 Sep
'11
5:31 p.m.
On Sun, 04 Sep 2011 16:16:45 EDT, Sharon Goldberg said:
Point 2: "The security threat model is unrealistic and misguided"
Our paper does not present a security threat model at all. We do not present a new security solution.
Unfortunately for all concerned, it's going to be *perceived* as a security solution, and people will invent a threat model to match. Anybody who thinks otherwise is invited to compare what people *think* the meaning of the little padlock their browser displays versus what the padlock *actually* means, or the difference between what people *think* SPF does for their email versus what it *actually* does.