
|
Trust Model CE trusts SP to faithfully distribute tokens CE assumes that the SP is subject to occasional configuration errors SP cannot protect against these errors because the provisioner believes that he/she is doing the right thing CE must maintain checks and balances Protects against accidental misconfiguration, not malicious behavior on the part of the SP |