Lessee - adding something to minus infinity equals what? Minus infinity?
Knox is about as "secure" as a wet tissue in a monsoon. So now they made it as secure as a dry tissue in a monsoon?
If my data gets "compromised" (someone steals my phone), I have 2 apps and Android Device Manager to wipe the phone. I don't work for someone who needs me to carry 2 logical computers in my pocker, so how about giving us 2 versions of the OS - one with Knox, Schmox, armed guards and Semtex ready to self-destruct at the first frown, and another one for the majority of cellphone users - the ones whose greatest "secret" on the phone is an embarrassing selfie? Even if they're the same price, so I'm paying for the 15 minutes of "thought" that went into Knox (it couldn't have been more than that - if they thought about it they would have come up with something sensible - unless it was designed by marketing in which case the less said the better) without getting it, but with the ability to install CWM and make a nandroid? You need a phone to read emails with, but that the company can wipe at a him? Any old feature phone. For the cost, the "security" can be a 16 ounce hammer. Cheper to destroy a $20 phone than pay $200 for the amortization of a "security" scheme that's worthless anyway.
And how is Knox going to "defeat" Wireshark. THAT'S the elephant in the room that no one's willing to talk about - your data after it leaves or before it arrives at your phone. DARPA can secure against that - but the phone is larger than most laptops and weighs more than most of them. (SSL? Give it to Leno - he needs a new joke.)