Re: [OSPF] OSPF

Glen,

	I don't know if this will get to the general mailing list, so you can forward if you want.

	First, the most general rule is to be secure all components must be "Trusted". Within the internet this is very difficult unless..

	Within Ethernet, within OSPF, we have two major bottlenecks; the DR and the BDR. Thus for a new entity to become a DRother BOTH of those must authenticate it.

	Thus no vulnerability exists if authentication support exists and this future possible DRother fails authentication.

	Mitchell Erblich

Begin forwarded message:

> From: Glen Kent <glen.kent@gmail.com>
> Subject: [OSPF] OSPF - Owning the Routing Table Attack
> Date: August 2, 2013 9:41:01 AM PDT
> To: "ospf@ietf.org" <ospf@ietf.org>
> 
> Hi,
> 
> Does anybody have details on what this OSPF vulnerability is?
> 
> https://www.blackhat.com/us-13/briefings.html#Nakibly
> Glen
> 
> _______________________________________________
> OSPF mailing list
> OSPF@ietf.org
> https://www.ietf.org/mailman/listinfo/ospf
Begin forwarded message:

> From: Uma Chunduri <uma.chunduri@ericsson.com>
> Subject: Re: [OSPF] OSPF - Owning the Routing Table Attack
> Date: August 2, 2013 10:19:23 AM PDT
> To: Glen Kent <glen.kent@gmail.com>, "ospf@ietf.org" <ospf@ietf.org>
> 
> Remembered comments about this in SAAG.
>  
> If authentication shared secrets are compromised (insider attack) you can envision all sorts of issues.
>  
> If this is still considered serious consider changing keys or use a key management protocol (hope there will be one defined) to do this periodically!
>  
> -- 
> Uma C.
> 
>  
> 
> From: ospf-bounces@ietf.org [mailto:ospf-bounces@ietf.org] On Behalf Of Glen Kent
> Sent: Friday, August 02, 2013 9:41 AM
> To: ospf@ietf.org
> Subject: [OSPF] OSPF - Owning the Routing Table Attack
> 
> Hi,
> 
> Does anybody have details on what this OSPF vulnerability is?
> 
> https://www.blackhat.com/us-13/briefings.html#Nakibly
> Glen
> 
> _______________________________________________
> OSPF mailing list
> OSPF@ietf.org
> https://www.ietf.org/mailman/listinfo/ospf
Begin forwarded message:

> From: Uma Chunduri <uma.chunduri@ericsson.com>
> Subject: Re: [OSPF] OSPF - Owning the Routing Table Attack
> Date: August 2, 2013 10:19:23 AM PDT
> To: Glen Kent <glen.kent@gmail.com>, "ospf@ietf.org" <ospf@ietf.org>
> 
> Remembered comments about this in SAAG.
>  
> If authentication shared secrets are compromised (insider attack) you can envision all sorts of issues.
>  
> If this is still considered serious consider changing keys or use a key management protocol (hope there will be one defined) to do this periodically!
>  
> -- 
> Uma C.
> 
>  
> 
> From: ospf-bounces@ietf.org [mailto:ospf-bounces@ietf.org] On Behalf Of Glen Kent
> Sent: Friday, August 02, 2013 9:41 AM
> To: ospf@ietf.org
> Subject: [OSPF] OSPF - Owning the Routing Table Attack
> 
> Hi,
> 
> Does anybody have details on what this OSPF vulnerability is?
> 
> https://www.blackhat.com/us-13/briefings.html#Nakibly
> Glen
> 
> _______________________________________________
> OSPF mailing list
> OSPF@ietf.org
> https://www.ietf.org/mailman/listinfo/ospf