Propose to add one use case of security context establishment and propagation

[maxpassion]

Propose to add one use case of security context establishment and propagation.

[hannestschofenig]

Max, are machine learning models really so valuable to companies that they want to prevent competitors or other parties to see them unencrypted? I think that is the most important assumption behind your use case.

[hannestschofenig]

I believe your text is good otherwise but I think we will need to talk a bit about confidential computing before we add the description. IMHO we should definitely touch confidential computing in this architecture document!

[maxpassion]

Max, are machine learning models really so valuable to companies that they want to prevent competitors or other parties to see them unencrypted? I think that is the most important assumption behind your use case.

Hi Hannes,

Good question, we do see the trends that machine learning models (including domain-specific training data) are considered as valuable and important assets for many stakeholders in the ecosystem so they have higher security requirements for the computing environment.

[maxpassion]

I believe your text is good otherwise but I think we will need to talk a bit about confidential computing before we add the description. IMHO we should definitely touch confidential computing in this architecture document!

I agree we should touch confidential computing in this architecture document.

[yaroslavros]

I would suggest to generalise this use case beyond LLM. Hardware attestation and propagation of attested identity is useful for many other applications - for example processing PII have severe legal implications and many organisations want to mitigate associated risks.

[maxpassion]

I would suggest to generalise this use case beyond LLM. Hardware attestation and propagation of attested identity is useful for many other applications - for example processing PII have severe legal implications and many organisations want to mitigate associated risks.

Hi Yaroslav, Thanks for the comments, will update the text soon.

[maxpassion]

generalized the use case of security context establishment and propagation.

[maxpassion]

generalized the use case of security context establishment and propagation.

@hannestschofenig @yaroslavros Could you please review the updated text? thanks