Re: [Roll] [roll] #144 (applicability-home-building): Missing discussion of link encryption and group keys

["roll issue tracker" <[e-mail]>]

#144: Missing discussion of link encryption and group keys


Comment (by [e-mail]):

 Catherine Meadows comment - 04/22/2014

 "My comment had been that a comparison of link and group key encryption
 was needed.  It looks like
 what you have instead is a summary of the recommended practice for
 wireless/mesh networks, which is to
 use link encryption in which all links are encrypted with the same key,
 which is also used for authentication,
 so that unauthorized nodes can’t join the network, with reference to the
 appropriate RFC’s.  That is fine.

 I had another comment about the danger of having critical components (e.g.
 burglar alarms) sharing keys with non-critical and
 easily misplaced components (such as remotes).  But that is really
 irrelevant to whether you are using link encryption or group keys.  It
 would be better in such a situation to have the two components on separate
 networks.  This is now touched upon in the Deployment Scenario
 Section (last paragraph before 2.1), so I don’t see any reason to bring it
 up here.  However, you might want to mention in the last paragraph
 before 2.1 that having non-critical functions such as gaming on a separate
 network from the control is also a good idea from the point of view
 of security and reliability of the control network.

 Nits:

 Section 6.1

 Wireless networks are typically secured at the link-layer to prevent
    unauthorized parties to access

 should be

 Wireless networks are typically secured at the link-layer in order to
 prevent
    unauthorized parties from accessing"

-- 
-------------------------------------+-------------------------------------
 Reporter:                           |       Owner:  draft-ietf-roll-
  [e-mail]      |  applicability-home-
     Type:  defect                   |  [e-mail]
 Priority:  major                    |      Status:  new
Component:  applicability-home-      |   Milestone:
  building                           |     Version:
 Severity:  Active WG Document       |  Resolution:
 Keywords:  Security Review          |
-------------------------------------+-------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/roll/trac/ticket/144#comment:2>
roll <http://tools.ietf.org/wg/roll/>