[dhcwg] Security for leasequery messages

The following issues relate to security for leasequery messages:

Steve Bellovin:

Discuss:
(26 March 2004)
The Security Considerations section says this:

    DHCP servers SHOULD prevent exposure of location information
    (particularly the mapping of hardware address to IP address lease,
    which can be an invasion of broadband subscriber privacy) by
    employing some form of relay agent authentication between the
    DHCPLEASEQUERY client and the DHCP server.

    Clients of the DHCPLEASEQUERY message SHOULD ensure that their data
    path to the DHCP server is secure.  Clients SHOULD use Relay Agent
    Information security as a way to achieve this goal.

What is "some form of ... authentication"?  What is "Relay Agent Information
security"?  Put another way, what is mandatory to implement?

Russ Housley:

Discuss:
   Section 7 says:
   >
   > DHCP servers SHOULD prevent exposure of location information
   > (particularly the mapping of hardware address to IP address lease,
   > which can be an invasion of broadband subscriber privacy) by
   > employing some form of relay agent authentication between the
   > DHCPLEASEQUERY client and the DHCP server.
   >
   There needs to be more discussion of the authentication requirements.
   I would prefer the specification to name a mandatory-to-implement
   mechanism, but that may be asking too much.

   Section 7 also says:
   >
   > Clients of the DHCPLEASEQUERY message SHOULD ensure that their data
   > path to the DHCP server is secure.
   >
   What security services are needed?  Integrity, authentication, access
   control, replay protection confidentiality?  The hint about Relay Agent
   Information security, with no reference, is not sufficient.

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg