Subject: Re: [Suit] Threat Model and User Stories for draft-moran-suit-manifest-00

From: "Salz, Rich" <[email-masked]>
Date: Sat, 11 Nov 2017 06:54:37 +0000

*   The manifest format as described in draft-moran-suit-manifest-00 was designed using a threat model and a set of User stories. From the threat model, we extracted security requirements that mitigate the threats and placed fields in the manifest that enable implementation of the security requirements. From the user stories, we extracted usability requirements that enable those user stories, and placed fields in the manifest that implement those usability requirements.

Much of this would be highly useful as appendices to your next update of the draft.