Suggestions for Qubes Architecture Diagram

[wobo]

So sys-usb to AppVM link should be red?

[deeplow]

We didn’t discuss that in particular (but we did discuss the sys-net <-> sys-firewall. For that one even though the argument “VM-interconnects are trusted”, I think there is an associated risk of exposing that VM to a Bab USB, so I’d argue it should be red.

Another thing, I just noticed that bellow “AppVM 1” there should be label “personal” (all other AppVMs have a label). But I don’t think it’s to important to justify another change (at least from my part).

[GWeck]

I agree - AppVM1 just stands for any AppVM, it could also be “work” or even “untrusted” - but then we would again get into the colour discussion. For me, it’s just fine as it is!