Re: [Suit] Suit manifest with variable recipients

[Michael Richardson <[e-mail]>]

Brendan Moran <[e-mail]> wrote:
    > 1: The threat described above: An on-path attacker upstream of the
    > status tracker suppresses a device. This is different from existing
    > SUIT DoS threats because of the targeting of single devices from
    > outside a network. To be clear, this is not simply a DoS; it is an
    > Elevation of Privilege (unprivileged actor decides which devices are
    > updated) AND a Repudiation threat (Not possible to know who chose which
    > devices received updates). The status tracker CAN inform the device of
    > the new update, but the device appears not to have been authorised by
    > the owner of the firmware (via the Content Encryption Key)

Let's say that it's not malicious.
Let's say that upstream provider noticed that you didn't renew support on
that device, so they removed the access.

Shouldn't the Status-Tracker still notice that the device hasn't got the
right firmware?

Again, I think you are trying to solve an operational problem in the
manifest, and I think that it just can't work.  I think you are trying to do
this, because we don't have any specifications on real status-trackers.

--
Michael Richardson <[e-mail]>ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-