Re: [Secdispatch] Appropriate WG for secure communication between networks and unknown clients

[Mohit Sethi M <[e-mail]>]

Hi Tommy,


Would it be fair to summarize your requirements as:

- Client devices don't have any pre-configured credentials or information about the network

- No out-of-band configuration of any sort is possible


In that case, I guess I don't have any black magic to offer. The only techniques that I am aware of are in research literature: see secure in-band pairing: https://www.usenix.org/legacy/events/sec11/tech/full_papers/Gollakota.pdf


--Mohit

On 8/3/20 8:58 PM, Tommy Jensen wrote:
Hey SECDISPATCH,

In the ADD WG, there's been a lot of discussion on the topic of secure communication between networks and clients that aren't preconfigured. The context is how a network can convince a client, which has no out-of-channel configuration to use for confirming network identity, that it has recommendations that can be distinguished from an attacker on the network.

This was brought up in our WG as part of the "Network A recommends DNS server B" which is done over DHCP or RAs today. With encrypted DNS protocols now available, we want to allow a network to advertise its own encrypted DNS servers. However, if we use DHCP or RAs as they are defined today, this can be hijacked by an attacker to convince clients to setup secure connection to an attacker's server.

We know secured network configuration without out-of-band configuration is a hard problem but want to discuss it in a larger context than just DNS so we don't try to define a mechanism that cannot be reused by other scenarios.. This mailing list was recommended in our IETF 108 WG session as a good contact for helping us find the right audience for this discussion. Any thoughts?

Thanks,
Tommy Jensen



_______________________________________________
Secdispatch mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/secdispatch