Threat modeling SAL: what it defends against and what it doesn't

One thing I dislike in security-adjacent writing is when a protocol is described as if it dissolves risk by being well intentioned. SAL is not that kind of protocol. It is meant to reduce specific classes of problems in agent identity. It does not make compromised hosts safe. It does not make malicious agents honest. It does not remove the need... Weiterlesen