Move threat model doc to GitHub

Move threat model doc to GitHub
What happened to the distinctions between active and passive network adversaries? These are important, both for local and global attackers. There is also something to be said for adversaries who are capable of forging SSL certificates and using those to spoof HTTPS landing pages.