Principle: Be Specific
In real life, holistic judgments are vague:
- ěI trust my spouseî ó for what?
- ěI trust my Bankî ó thatís not how they see it
General-purpose Web tools frustrate:
- Web servers deal in bags of bits between machines
- Not easy to distinguish a medical record file
- Not easy to identify the actual user
- Web client interfaces donít understand either
- ëDo you want to submit this data unencryptedí - swat!
- Underlying OS security can thwart limits
- Sandboxing mobile code, redistribution limits
Notes:
Be specific about the level of trust, too.