Re: [secdir] SecDir review of draft-ietf-dhc-topo-conf-08

Suresh Krishnan <suresh.krishnan@ericsson.com> Fri, 08 July 2016 19:41 UTC

Return-Path: <suresh.krishnan@ericsson.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D131127058; Fri, 8 Jul 2016 12:41:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nuHmV08n_39C; Fri, 8 Jul 2016 12:41:27 -0700 (PDT)
Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EDFE12D0BD; Fri, 8 Jul 2016 12:41:27 -0700 (PDT)
X-AuditID: c6180641-f796f6d000000e1e-ed-578001a36fbd
Received: from EUSAAHC006.ericsson.se (Unknown_Domain [147.117.188.90]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id 36.A9.03614.3A100875; Fri, 8 Jul 2016 21:40:19 +0200 (CEST)
Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC006.ericsson.se ([147.117.188.90]) with mapi id 14.03.0294.000; Fri, 8 Jul 2016 15:41:25 -0400
From: Suresh Krishnan <suresh.krishnan@ericsson.com>
To: "yaronf.ietf@gmail.com" <yaronf.ietf@gmail.com>, "iesg@ietf.org" <iesg@ietf.org>, "volz@cisco.com" <volz@cisco.com>, "tomasz.mrugalski@gmail.com" <tomasz.mrugalski@gmail.com>, "secdir@ietf.org" <secdir@ietf.org>, "draft-ietf-dhc-topo-conf.all@tools.ietf.org" <draft-ietf-dhc-topo-conf.all@tools.ietf.org>
Thread-Topic: SecDir review of draft-ietf-dhc-topo-conf-08
Thread-Index: AQHRvboHXmaXobDEYkKp6QMo3tFpbKAPXMMA///JNcM=
Date: Fri, 8 Jul 2016 19:41:24 +0000
Message-ID: <E87B771635882B4BA20096B589152EF643D59BFF@eusaamb107.ericsson.se>
References: <5751B895.1070400@gmail.com> <5751D4E6.6000709@gmail.com> <575344A7.30002@gmail.com> <504107ae-7f75-3ba7-afbd-7ed1f104f0b4@gmail.com> <E87B771635882B4BA20096B589152EF643D48090@eusaamb107.ericsson.se>, <fbb1cc3d6c344e8b8f660e0ee73600f0@XCH-ALN-003.cisco.com>
In-Reply-To: <fbb1cc3d6c344e8b8f660e0ee73600f0@XCH-ALN-003.cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: multipart/alternative; boundary="_000_E87B771635882B4BA20096B589152EF643D59BFFeusaamb107erics_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprFIsWRmVeSWpSXmKPExsUyuXRPlO5ixoZwg1m3tCz2dp9itpjxZyKz xYeFD1ks9l9bwGSxfIamxar7M9gd2Dym/N7I6rFz1l12jyVLfjJ5fLn8mS2AJYrLJiU1J7Ms tUjfLoErY+PK62wFl9Iq9i75z9jAuDKsi5GTQ0LAROLPxhnMELaYxIV769m6GLk4hASOMkrM O/CeCcJZxiix72QPI0gVG1DHhp2fwRIiAnuYJK7d/wfkcHAIC1hKPJ6QB1IjImAl0Xd6CjuM Pf3bASYQm0VARWL/o0Vgc3gFfCW+zv7IDLFgApPEq4ndrCAJTgFXifl7V4I1MAKd9P3UGjCb WUBc4taT+UwQpwpILNlzHupsUYmXj/+xQtTkS5za9o4NYoGgxMmZT1gmMArPQtI+C0nZLCRl EHEdiQW7P7FB2NoSyxa+Zoaxzxx4zIQsvoCRfRUjR2lxQU5uupHhJkZgjB2TYHPcwbi31/MQ owAHoxIPr8Kr+nAh1sSy4srcQ4wSHMxKIrwf/gGFeFMSK6tSi/Lji0pzUosPMUpzsCiJ8+q/ VAwXEkhPLEnNTk0tSC2CyTJxcEo1MGqnZjO4rFXc/umWvLHZPe77y5n2vvraV6CzedWNs613 71r+CLie9lSmbtX97LU/g8QV43qOn2VS1bpcYVT1LeadLwub/7TOLxfdp+6XEWd3r5vec1dO rHqnTud2zXvRFkvPKadrz+m/vtKl8HZjOnvqMcaWOfd9FQzl5/7yC5jyokUt6ftjAyWW4oxE Qy3mouJEAA/A65utAgAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/Ahj3yvB-8ho_b-VPe3vqrhxASB4>
Subject: Re: [secdir] SecDir review of draft-ietf-dhc-topo-conf-08
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Jul 2016 19:41:31 -0000

Hi Bernie,
Yep. I saw the 09 draft got published this afternoon and I will be moving it along the process.

Thanks
Suresh

-----Original Message-----
From: Bernie Volz (volz) [volz@cisco.com]
Received: Friday, 08 Jul 2016, 2:57PM
To: Suresh Krishnan [suresh.krishnan@ericsson.com]; Tomek Mrugalski [tomasz.mrugalski@gmail.com]; Yaron Sheffer [yaronf.ietf@gmail.com]; IETF Security Directorate [secdir@ietf.org]; The IESG [iesg@ietf.org]; draft-ietf-dhc-topo-conf.all@tools.ietf.org [draft-ietf-dhc-topo-conf.all@tools.ietf.org]
Subject: RE: SecDir review of draft-ietf-dhc-topo-conf-08

Hi Suresh:

In case you missed it (perhaps Tomek sent you email), but Tomek did publish the 09 with the revised security considerations text ... So if you can move this document forward, would be great!

- Bernie

-----Original Message-----
From: Suresh Krishnan [mailto:suresh.krishnan@ericsson.com]
Sent: Wednesday, June 29, 2016 7:55 PM
To: Tomek Mrugalski <tomasz.mrugalski@gmail.com>om>; Yaron Sheffer <yaronf.ietf@gmail.com>om>; IETF Security Directorate <secdir@ietf.org>rg>; The IESG <iesg@ietf.org>rg>; draft-ietf-dhc-topo-conf.all@tools.ietf.org
Subject: Re: SecDir review of draft-ietf-dhc-topo-conf-08

Hi Yaron,
   Any thoughts on this new text? Does this address your concerns?

Thanks
Suresh

On 06/22/2016 07:37 AM, Tomek Mrugalski wrote:
> Hi Yaron,
>
> Thanks again for your review. I came up with a proposed text for the
> security considerations text. There's not much left from the original
> text, so here's the whole proposed section:
>
> 10.  Security Considerations
>
>     This document explains existing practice with respect to the use of
>     Dynamic Host Configuration Protocol [RFC2131] and Dynamic Host
>     Configuration Protocol Version 6 [RFC3315].  The security
>     considerations for these protocols are described in their
>     specifications and in related documents that extend these protocols.
>
>     The mechanisms described in this document could possibly be exploited
>     by an attacker to misrepresent its point of attachment in the
>     network.  This would cause the server to assign addresses, prefixes
>     and other configuration options, which can be considered a leak of
>     information.  In particular, this could be used a preliminary stage
>     of attack, when the DHCP server leaks information about available
>     services in networks that attacker does not have access to.
>
>     There are several ways how such an attack can be prevented.  First,
>     it seems to be a common practice to filter out DHCP traffic coming in
>     from outside of the network and one that is directed to clients
>     outside of the network.  Second, the DHCP servers can be configured
>     to not respond to traffic that is coming from unknown (i.e. those
>     subnets the server is not configured to serve) subnets.  Third, some
>     relays provide the ability to reject messages that do not fit
>     expected characteristics.  For example CMTS (Cable Modem Termination
>     System) acting as a DHCP relay detects if the MAC address specified
>     in chaddr in incoming DHCP messages matches the MAC address of the
>     cable modem it came from and can alter its behavior accordingly.
>     Also, relay agents and servers that are connected to clients directly
>     can reject traffic that looks as if it has passed a relay (this could
>     indicate the client is attempting to spoof a relay, possibly to
>     inject forged relay options).
>
>     There are a number of general DHCP recommendations that should be
>     considered in all DHCP deployments.  While not strictly related to
>     the mechanisms described in this document, they may be useful in
>     certain deployment scenarios.  [RFC7819] and [RFC7824] provide an
>     analysis of privacy problems in DHCPv4 and DHCPv6, respectively.  If
>     those are of concern, [RFC7844] offers mitigation steps.
>
>     Current DHCPv4 and DHCPv6 standards lack strong cryptographic
>     protection.  There is an ongoing effort in DHC working group to
>     address this.  [I-D.ietf-dhc-sedhcpv6] attempts to provide mechanism
>     for strong authentication and encryption between DHCPv6 clients and
>     servers.  [I-D.volz-dhc-relay-server-security] attempts to improve
>     security of exchanges between DHCP relay agents and servers.
>
>     Finally, there is an ongoing effort to update DHCPv6 specification,
>     that is currently 13 years old.  Sections 23 (Security
>     Considerations) and 24 (Privacy Considerations) of
>     [I-D.ietf-dhc-rfc3315bis] contain more recent analysis of the
>     security and privacy considerations.
>
> If you prefer to see the whole document, the unpublished -09 is
> available here:
> https://github.com/tomaszmrugalski/ietf-topo-conf/blob/master/draft-ietf-dhc-topo-conf-09.txt
>
> Let me know if the text addresses your comments.
>
> Thanks again for your thorough review.
>
> Tomek
>
>