Fix sentence fragments
There are a lot of sentence fragments in this document.
e.g.
4.1. A1 - Web Attacker
Standard web attacker model. Can send and receive messages just like any other party controlling one or more endpoints on the internet. Can participate in protocols flows as a normal user. Can use arbitrary tools (e.g., browser developer tools, custom software, local interception proxies) on their own endpoints to tamper with messages and assemble new messages. Can send links to honest users that are then visited by these users. This means that the web attacker has the ability to cause arbitrary requests from users' browsers, as long as the contents are known to the attacker.
We need to turn them into full sentences.
In the case above, it reads as if Web Attacker == model, which I belive is not the case. When fully expanded, it would probably become something like below:
4.1. A1 - Web Attacker
A1 is a standard web attacker in this model. It
- can send and receive messages just like any other party controlling one or more endpoints on the internet;
- can participate in protocols flows as a normal user;
- can use arbitrary tools (e.g., browser developer tools, custom software, local interception proxies) on their own endpoints to tamper with messages and assemble new messages; and
- can send links to honest users that are then visited by these users. This means that the web attacker has the ability to cause arbitrary requests from users' browsers, as long as the contents are known to the attacker.
Comments (4)
-
-
-
assigned issue to
-
assigned issue to
-
- changed status to resolved
Fix sentence fragments, fix Issue
#657→ <<cset 690b99303407>>
-
Merged in danielfett/fix-657 (pull request #469)
Fix sentence fragments, fix Issue
#657Approved-by: Dima Postnikov Approved-by: Dave Tonge Approved-by: Joseph Heenan
→ <<cset 5483da0ee711>>
- Log in to comment
Happy to fix this, but I’d like to see https://bitbucket.org/openid/fapi/pull-requests/456 and https://bitbucket.org/openid/fapi/pull-requests/456 merged first in order to not spend too much time fixing merge conflicts.