Example: file protection
Easy to design & build an encryption filter:
$ vi diary
$ cryptomatic -key ‘dilbert` < diary > work.dat
Amazingly hard to get people to use it
- even harder to get people to use it correctly
- did user remember to remove the cleartext diary?
Practical solution requires more than a filter
- integration with file system (or other OS layer)
- integration into applications