Skip to content

Commit

Permalink
Update draft-dekater-scion-pki.md
Browse files Browse the repository at this point in the history
  • Loading branch information
cdekater authored Dec 5, 2023
1 parent dc5dc76 commit 85b7585
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion draft-dekater-scion-pki.md
Original file line number Diff line number Diff line change
Expand Up @@ -1340,7 +1340,7 @@ This section describes the possible security risks and attacks that SCION's cont
**Note:** This section only discusses security considerations related to SCION's control-plane PKI. For SCION control plane- and routing-specific security considerations, see {{I-D.scion-cp}}. {{I-D.scion-dp}} includes security considerations that concern the SCION data plane and data forwarding.


## Kill Switches
## Kill Switches

SCION’s trust architecture fundamentally differs from a global monopolistic trust model. In SCION, each ISD manages its own trust roots instead of a single global entity providing those roots. This structure gives each ISD autonomy in terms of key management and in terms of trust. This prevents SCION from the occurrence of a global kill switch affecting all ISDs at once. However, local kill switches are to some extent still possible in SCION. The following sections explain these cases and possible countermeasures.

Expand Down

0 comments on commit 85b7585

Please sign in to comment.