Field notes from the identity layer¶

The endpoint is a triangle: the device, the identity it holds, and the cloud it authenticates to. Compromise any corner and the other two are in reach. The surfaces come first: what a device offers to enumeration before anything has been spent on it, the browser it carries, the phone that shares its identity, and the port on the front of the case.