2021-01-03 UTC
# 
[Raphael_Luckom] like if we assume a given use case, like blogging or microblogging, it seems like we ought to be able to _do_ some of the obvious threat models in a generic way, reasoning all the way through them, in a way that would leave a beginner well informed without getting baffled by owasp or something