l3vpn-5----Page:5
1  2  3  4  5  6 

Trust Model
CE trusts SP to faithfully distribute tokens
CE assumes that the SP is subject to occasional configuration errors
SP cannot protect against these errors because the provisioner believes that he/she is doing the right thing
CE must maintain checks and balances
Protects against accidental misconfiguration, not malicious behavior on the part of the SP
PPT Version