[lisp] Please read draft-bagnulo-lisp-threat-01.txt

Sam Hartman <hartmans-ietf@mit.edu> Mon, 12 October 2009 18:34 UTC

To: lisp@ietf.org
From: Sam Hartman <hartmans-ietf@mit.edu>
Date: Mon, 12 Oct 2009 14:34:53 -0400
Message-ID: <tslaazwpik2.fsf@mit.edu>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Cc: marcelo@it.uc3m.es
Subject: [lisp] Please read draft-bagnulo-lisp-threat-01.txt
Precedence: list

Luigi's security draft contained a reference to Marcelo's earlier
threat analysis which I at least had never run across.  It's excellent
work and I'd strongly encourage everyone in the WG to read it.

Stylistically it does a good job of motiving the attack and providing enough detail to explain why the attack is realistic/when the attack is realistic. 

The draft is somewhat dated.  It analyzes LISP 1 (routable EIDs) not
LISP 1.5 (what we're doing, I think).  Also, several of the attacks
described there have been fixed.  For example, we have much stronger
wording about the problems of gleaning and I think we may even have a
consensus that data gleaning is inappropriate for Internet contexts.

Also, some of the details have changed.

However some of the attacks described seem alive and well against
current LISP and definitely seem like the sorts of things we'll need
to fix.  So, between be an excellent example of how to go about this
sort of analysis and containing still-important information for
today's LISP, I think it is well worth the read if you have not done
so.  However, before drawing conclusions, make sure they are still
accurate for the LISP of 2009 instead of the LISP of 2007.

[lisp] Please read draft-bagnulo-lisp-threat-01.t… Sam Hartman