[radext] Re: Selfie Attack on TLS-PSK

[Alan DeKok <[e-mail]>]

On Jul 25, 2024, at 3:43 PM, Margaret Cullen <[e-mail]> wrote:
> As I understood Stefan’s message, he was talking about copying the raw packet as received from the transport, not proxying the packet as you described.  I don’t know why this would be done, nor do I know of anyone who is doing it. I’m assuming Stefan does, because he brought this up as a use case for why binding the TLS and RADIUS layers would be undesirable.

  If a system is copying raw packets, then all bets are off.

> I was attempting to point out that security implications of “dumb copying” a RadSec packet (with a secret of “radsec”) are different than the implications of dumb copying a RADIUS/UDP packet (with a non-constant secret), because in the RadSec case, the contents can be converted to plaintext using the “radsec” secret value, but in the RADIUS/UDP, you need to crack MD5 to see the full contents.
> 
> That _is_ a _real_ difference.  Without knowing who is doing “dumb copying” in what situations, we can’t know if it is a significant difference.

  I would argue that raw copying is forbidden, and is outside of the scope of normal RADIUS practices.  It's not something I would worry about.

  People can always do bad things, and we can't always prevent them.

  Alan DeKok.