IETF Logo Mail Archive

Re: [dnssd] Confirming consensus from DNSSD Privacy discussion in Bangkok

Christopher Wood <christopherwood07@gmail.com> Thu, 28 February 2019 06:25 UTC

Return-Path: <christopherwood07@gmail.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8D63129508 for <dnssd@ietfa.amsl.com>; Wed, 27 Feb 2019 22:25:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.748
X-Spam-Level:
X-Spam-Status: No, score=-1.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IVZdvLdIRsXk for <dnssd@ietfa.amsl.com>; Wed, 27 Feb 2019 22:25:16 -0800 (PST)
Received: from mail-yw1-xc35.google.com (mail-yw1-xc35.google.com [IPv6:2607:f8b0:4864:20::c35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C9D9128701 for <dnssd@ietf.org>; Wed, 27 Feb 2019 22:25:16 -0800 (PST)
Received: by mail-yw1-xc35.google.com with SMTP id q128so10200788ywg.8 for <dnssd@ietf.org>; Wed, 27 Feb 2019 22:25:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=+Su8tFU8F5JubR1DEE7JWHFzgmJ1tjeDnoCIdaAYs/k=; b=JQvemvsy/OP5OLiRO+T7vLDnD4NDEeAnsPZq/tm13zxlKFTkmf+pHLNTZ0Mnnn8aaP T1tgy5ORpz9NiZfNC1IZHmF7xCzo4yrDe06AdWcyfp/jYBqbM8mTMfCC5ffnPdGM3+Lc KTRdb+NpsA9G+EchKolWvz8WJq3mFVpI83OxMxIy456Lxxfa+aG1/abYfEfAZNCJRdMh Rlx5XN0Ao8WZCUFfNyGNIRr5889TlQpjfgdyTfRYBebvWjjgySxWQ5uxc31vwPsAdIJV OZ/FLeohcvotHyWul3Bwt3LO7Xq03jWcUNAwCovm5u3RlefGessa7sCswsdFzR4lVVLt W8Sw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=+Su8tFU8F5JubR1DEE7JWHFzgmJ1tjeDnoCIdaAYs/k=; b=ARH9AVan19wh6BlYKDHKJQ0uTNfBVbpdwIEzPpnNE2zG9JMeOUWjl6xb53mdwwXfOd xKK4/5XIkUciWrwhhDqVBc1qBMfxElyBp0bTKD2MqH3hLYndkEhlNVxJ0gYqxZxA7Awv miMLxYwBSmtmhg6azMrFmhZ8L0xBLFiCLzTPcSQdMJuCxI1fCoofFIn8v04F++2AoMY+ ljFNGBUabKSE6DMkv9u8xAbsS9iwHSt2ERyk2i3uwwr93XpPNFz6Xf+eHvpU5jwLV0ZY LkTIJQC+ANgPg3TIGrvgUfxiLySYYmoaAyv1wCNvFSne6/FfNeQok9YDKPLt3/vH+TWi RTbQ==
X-Gm-Message-State: AHQUAuaslhkzPq5fwQMWetEP9E3PzIjgVSVlaMFSY/fYHjTmi2X7qPAl wpCb5jvFYLhXf4c1OuxmP7c2qhrnpXNq9ClpzdI=
X-Google-Smtp-Source: AHgI3IaG/NhGzA1W27jJyZGfKxyGWnhFbvS5XWonV2Wdbv4TxT8IquR9CAvfrJW8I+JfobfxJxWNoqzg07hPyrSnFB0=
X-Received: by 2002:a0d:ec08:: with SMTP id v8mr4358662ywe.298.1551335115283; Wed, 27 Feb 2019 22:25:15 -0800 (PST)
MIME-Version: 1.0
References: <CAPDSy+6YyW_G7uwfwGPv1KLtJqL96dZ87R-5pnmmffEEniTigg@mail.gmail.com> <CAPDSy+68V=rx8cAbVq6rKxNbb9yHisCCPURwHoLKsA179NooLw@mail.gmail.com> <e9b4900d-94e3-c79a-2a72-e2f996663b9d@huitema.net> <CAPDSy+4d27SQCStGzPpzzv=pjGiCM+0df988BesRGHdV_vvteA@mail.gmail.com> <CAO8oSXnXre29hjbNCZ1N7b8VBRMubS1yO5_XXr7VY2yxzNAWGw@mail.gmail.com> <1fc0ba86-2619-6efb-5e89-aa0a025c998e@huitema.net> <CAO8oSX=rWYxkKq0H5dEJDKq_Hs3tH2gqSxQ-Cr_SaHDPkrvvCA@mail.gmail.com> <CAO8oSXkfszNXUT6gr1G2OEWgJXe-cX_S4yAJmLm5sUqN0SQ54w@mail.gmail.com> <CAPDSy+7UvYdNOeYZg-R2b+eXuvGNMguXDWtkKgotVpLP5YPk4g@mail.gmail.com> <3d4d353e-5cb5-e35f-fc31-db819b4b2506@huitema.net> <CAO8oSX=9Fi60GigVWgCRkLXxwgF8aD1BveVNicz6_m5S-MQnYg@mail.gmail.com> <867b0844-ddf2-a7d1-4b3c-166fb4770e2d@huitema.net> <CAO8oSXmKwA6yE3A_OczjCBSvLwm1jqT3dEDNGzAB88ZM785+CQ@mail.gmail.com> <eb11a426-fcf5-7e62-6b40-82f5218e1d47@huitema.net> <CAO8oSXkMc1RL7YBfmNx4teShO9BCT_FAvcXc5hatahDd-17uhg@mail.gmail.com> <a6357d59-fb6f-3129-2e7f-a77cfff9c145@huitema.net>
In-Reply-To: <a6357d59-fb6f-3129-2e7f-a77cfff9c145@huitema.net>
From: Christopher Wood <christopherwood07@gmail.com>
Date: Wed, 27 Feb 2019 22:25:04 -0800
Message-ID: <CAO8oSX=77_s+Fsog4P221v6gQ6TizAfzftivmf2HP=esg6wyHQ@mail.gmail.com>
To: Christian Huitema <huitema@huitema.net>
Cc: Bob Bradley <bradley@apple.com>, DNSSD <dnssd@ietf.org>, David Schinazi <dschinazi.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000079614f0582ee5af6"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/nBey4cFr8pSa3EAtlY0mlCgfxtI>
Subject: Re: [dnssd] Confirming consensus from DNSSD Privacy discussion in Bangkok
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Feb 2019 06:25:18 -0000

On Wed, Feb 27, 2019 at 9:43 PM Christian Huitema <huitema@huitema.net>
wrote:

> On 2/27/2019 8:15 PM, Christopher Wood wrote:
>
> > Okay, so, as I suspected, this is vulnerable to dictionary attacks if
> > the public key is leaked. Am I misunderstanding? If so, can you
> > explain why this is not the case?
>
> If the public key is leaked, anyone with the leaked key can impersonate
> an authorized client, establish a connection, etc. The secrecy of the
> public key is what keeps this together. In all these schemes, there has
> to be a secret that acts as the seed for the privates exchanges, and in
> the scheme I propose that secret is the public discovery key of the server.


Right! That confirms what I said above. Thanks for clarifying.

>

v2.23.0 | Report a Bug | By Email