The inventors of the Internet weren't thinking about data at rest – they were thinking about how to exchange data in a decentralized network that would be resistant to nuclear attack. This has led to a model were the focus on security has been on data in motion, yet all data in motion starts and finishes as data at rest.  As such on today's Internet, data is not verifiable – there is no mechanism to verify the properties of data, and organizations rely on process and trusted insiders. There is no concept of an information supply chain where parties can verify the provenance of data as it moves across networks and organizational boundaries.