🤝🤣
Why did you chop off the start of the sentence to make it look like I was saying the thing you were?
I was pointing out it's a ridiculous thing to suggest
I mentioned threat remodeling for several reasons. One of them is, as designed OPFS fails every single one of your suggestions, and more.
So, an entire HPSA model needs to be redesigned, or stick to non HPSA whatsoever until further peer reviewed refuzzing has been made.
This type vectorization isn't novel, it's just hilarious vendors just accepted it without further security considerations.
Right, yes it definitely needs fixing, that's what I'm saying. Then you veer off into saying we should build it from scratch again? Why? There's no apparent need for that given what you've said, you're just describing what we do to fix the existing standard?
It's the web, vendors don't break existing APIs unless there's no other option and from what you've written so far, the problem is in the implementation, not the API.