added issue about risk-averse attacker (design.md)

1 files changed, 15 insertions, 0 deletions

diff --git a/issues/risk-averse-attacker.md b/issues/risk-averse-attacker.md
new file mode 100644
index 0000000..519001b
--- /dev/null
+++ b/issues/risk-averse-attacker.md
@@ -0,0 +1,15 @@
+# Risk-averse attacker
+reported by: rgdd
+
+We used to have a paragraph in our threat model that emphasized that the
+attacker we, and transparent logs in general, consider is risk-averse.
+
+This paragraph was pulled because it simply stated properties about our attacker
+without explaining why that is interesting.  The threat model text is fine
+without it for now, but we should consider adding it in a proper way later on.
+
+When we do, consider if we should cite these academic papers as well:
+- https://eprint.iacr.org/2007/060.pdf
+- https://www.sciencedirect.com/science/article/abs/pii/S0161893807000592
+
+Credit: z4lem recommended these papers.