document threat model

[khimaros]

as this is likely to be of interest to security conscious users, a description of the threat model may be a useful aid in users deciding between this and other networks such as veilid or i2p.

[khimaros]

some threat models for other software:

https://web.archive.org/web/20150326154506/https://pond.imperialviolet.org/threat.html
https://docs.securedrop.org/en/latest/threat_model/threat_model.html
https://github.com/freedomofpress/securedrop-workstation/#user-content-threat-model
https://code.briarproject.org/briar/briar/-/wikis/threat-model
https://www.whonix.org/wiki/Dev/Threat_Model
https://2019.www.torproject.org/projects/torbrowser/design/#adversary

less conclusive, but some jumping off points:

signalapp/Signal-Android#782
https://gitlab.torproject.org/tpo/applications/vpn/-/issues/1

other resources and howtos:

https://en.wikipedia.org/wiki/Threat_model
https://owasp.org/www-community/Threat_Modeling_Process
https://martinfowler.com/articles/agile-threat-modelling.html
https://insights.sei.cmu.edu/blog/threat-modeling-12-available-methods/

[khimaros]

here's another simple and clear example: https://github.com/TryQuiet/quiet/wiki/Threat-Model