[tor-bugs] #5273 [Firefox Patch Issues]: Update TBB design doc for 2.3.x

[Tor Bug Tracker & Wiki]

#5273: Update TBB design doc for 2.3.x
----------------------------------+-----------------------------------------
 Reporter:  mikeperry             |          Owner:  mikeperry                    
     Type:  defect                |         Status:  new                          
 Priority:  major                 |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  Firefox Patch Issues  |        Version:                               
 Keywords:  MikePerry201211d      |         Parent:                               
   Points:                        |   Actualpoints:                               
----------------------------------+-----------------------------------------

Comment(by gk):

 Replying to [comment:28 mikeperry]:
 > Hrmm. One of the major reasons people might not grok this whole doc is
 because the security and privacy requirements should perhaps go first, and
 then the adversary model afterwards. In this way, I might be able to
 describe how each adversary goal, capability, and attack lines against the
 security and privacy properties we aim to provide.
 But both the security and the privacy properties follow from the adversary
 model. Thus, it seems a bit odd to me to describe the former first and
 then deliver the model that fits to them. But, nevertheless, I think it is
 a good idea to describe how the attacker model is related to the security
 and privacy properties in more depth. Maybe in an additional,
 informal/informational section in "2. Design Requirements and Philosophy"
 just after the requirements got introduced? That probably depends on the
 stuff you'd like to write...
 > Also, the adversary model could then be its own top-level section,
 instead of buried in the intro...
 That seems orthogonal to me but is a good idea anyway.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5273#comment:29>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online