diff --git a/specification/appendices/threat_model.rst b/specification/appendices/threat_model.rst index 0dea62e0..9ad5fef8 100644 --- a/specification/appendices/threat_model.rst +++ b/specification/appendices/threat_model.rst @@ -65,7 +65,7 @@ making the chatroom unusable. Threat: Banning users without necessary authorisation +++++++++++++++++++++++++++++++++++++++++++++++++++++ -An attacker could attempt to ban a user from a chatroom with the necessary +An attacker could attempt to ban a user from a chatroom without the necessary authorisation. Spoofing @@ -134,7 +134,7 @@ An attacker could try to convince servers within a chatroom to send messages to a server it controls that was not authorised to be within the chatroom. Threat: Disclosure to Servers Within Chatroom -~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ++++++++++++++++++++++++++++++++++++++++++++++ An attacker could take control of a server within a chatroom to expose message contents or metadata for messages in that room.