Remove unsubstantiated statement about protecting against attacks whe…

…n compromised

index.html

@@ -3529,9 +3529,7 @@ <h1>
 elsewhere in the spec. <a>DIDs</a> are designed to operate under the general
 Internet threat model used by many IETF standards. We assume uncompromised
 endpoints, but anticipate that messages could be read or corrupted on the
-network. Protecting against an attack when a system is compromised requires
-external key-signing hardware (see Section <a
-href="#key-revocation-and-recovery"></a>).
+network.
     </p>
 
     <section>