Explain Attack Type

[tireddy2]

The draft should explain the capability of the attacker. It is useful in the case of a non-persistent attacker (e.g., malware) that exfiltrates the key and then gets removed by an endpoint protection system. It is not helpful in the case of a persistent attacker, but in this scenario, it has to perform key exfiltration after the key update. It is also not useful in case where the certificate is compromised.