Re: [lamps] Call for adoption of draft-housley-lamps-3g-nftypes

On Fri, 5 Aug 2022 at 18:35, Russ Housley <housley@vigilsec.com> wrote:

> Tiru:
>
> Thanks for the review.
>
> 1. Yes, this is a good topic to expand the Security Considerations.
>
> 2. This seems pretty obvious to me, but I will think about a sentence or
> two for a more complete explanation.
>

Thanks. You may want to also discuss the privacy and security implications
of using NFType in the certificate extension for RBAC. For example (1) If
TLS 1.2 is used by network functions, pervasive monitoring is possible for
an attacker to identify the NFTypes visible in the TLS handshake and can
potentially target a specific NFType (e.g., subject to DDoS or launch a
targeted attack). (3) Misuse of NFType to gain additional privileges and
what are the potential remediation techniques ?

>
> 3. The goal is to meet the needs of 5G Network Functions.  I am not sure
> that it would apply to other environments without adding complexity.  I
> would not want to add that complexity without someone offering a use case.
>

Okay.

-Tiru

>
> Russ
>
>
> On Aug 5, 2022, at 3:31 AM, tirumal reddy <kondtir@gmail.com> wrote:
>
> It looks like a straight-forward proposal but I have the following
> comments on the draft:
>
> 1. It seems any NF can claim any NFType. If NFType is used for role based
> access control, the threat model needs to be discussed to identify
> potential misuse.
> 2. You may want to elaborate on how the NFType is used for role-based
> access control.
> 3. Network Functions are possibly applicable in other deployments as well
> and not specific to 3GPP. Any specific reason to restrict the scope to 5G ?
>
> Cheers,
> -Tiru
>
> On Thu, 4 Aug 2022 at 21:22, Tim Hollebeek <tim.hollebeek=
> 40digicert.com@dmarc.ietf.org> wrote:
>
>> At the LAMPS meeting at IETF 114, Sean and Russ presented the following
>> draft: https://datatracker.ietf.org/doc/draft-housley-lamps-3g-nftypes/
>>
>>
>>
>> Should the LAMPS WG adopt “X.509 Certificate Extension for 5G Network
>> Function Types” in draft-housley-lamps-3g-nftypes?
>>
>>
>>
>> Please reply to this message by Monday, 22 August 2022 to voice your
>> support or opposition to adoption.
>>
>>
>>
>> On behalf of the LAMPS WG Chairs,
>>
>>
>>
>> -Tim
>>
>>
>> _______________________________________________
>> Spasm mailing list
>> Spasm@ietf.org
>> https://www.ietf.org/mailman/listinfo/spasm
>>
> _______________________________________________
> Spasm mailing list
> Spasm@ietf.org
> https://www.ietf.org/mailman/listinfo/spasm
>
>
>