Re: [VoT] Security Problem with Primary Credential Usage

Justin Richer <jricher@mit.edu> Fri, 13 May 2016 03:16 UTC

Return-Path: <jricher@mit.edu>
X-Original-To: vot@ietfa.amsl.com
Delivered-To: vot@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5051A12D09A for <vot@ietfa.amsl.com>; Thu, 12 May 2016 20:16:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.216
X-Spam-Level:
X-Spam-Status: No, score=-5.216 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WgrrJ4NhtyDD for <vot@ietfa.amsl.com>; Thu, 12 May 2016 20:15:59 -0700 (PDT)
Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DFB612B05D for <vot@ietf.org>; Thu, 12 May 2016 20:15:56 -0700 (PDT)
X-AuditID: 12074424-363ff70000005c1f-9d-573546eb8af6
Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by (Symantec Messaging Gateway) with SMTP id 2B.67.23583.BE645375; Thu, 12 May 2016 23:15:55 -0400 (EDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id u4D3Fs3Q027344; Thu, 12 May 2016 23:15:55 -0400
Received: from [IPv6:2607:fb90:445d:c3b9:b54b:a0bd:44e0:a8ef] ([172.58.105.194]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u4D3FpW2012068 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 12 May 2016 23:15:53 -0400
Date: Thu, 12 May 2016 22:15:48 -0500
Message-ID: <9f0l9pjqwg761iv3j87gea9x.1463109348211@email.android.com>
Importance: normal
From: Justin Richer <jricher@mit.edu>
To: Chris <cnd@geek.net.au>, Julian White <jwhite@nu-d.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="--_com.samsung.android.email_522018482281290"
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupmleLIzCtJLcpLzFFi42IRYrdT0X3tZhpu8O+VosXKT98ZLdavP8Vo 0fDzAasDs8elbROYPZYs+cnk0fKhgy2AOYrLJiU1J7MstUjfLoErY/mB6WwF33sYK+5f+Mzc wDixk7GLkZNDQsBEYuLL5yxdjFwcQgJtTBLNC9YwQjgbGSW6X+xkg3DOMkmc3L6JHaSFRUBV onPnY7B2YQFHif/NJ8DivAJuEt+aVjB1MXJwcAoISXTtkgAJswGVT1/TwgRiiwhYS1z8cAWs lVlAQGLuoWlMEK2CEidnPmGBiMdI9L2Zwz6BkXcWktQsJCkIW13iz7xLzBC2osSU7odAcQ4g W01iWasSsvACRrZVjLIpuVW6uYmZOcWpybrFyYl5ealFuuZ6uZkleqkppZsYweHrorKDsbvH +xCjAAejEg9vgpJpuBBrYllxZe4hRkkOJiVR3hRdoBBfUn5KZUZicUZ8UWlOavEhRgkOZiUR 3i2OQDnelMTKqtSifJiUNAeLkjgvIwMDg5BAemJJanZqakFqEUxWhoNDSYL3jhNQo2BRanpq RVpmTglCmomDE2Q4D9BwcWeQ4cUFibnFmekQ+VOMplLivDIgzQIgiYzSPLheJSEhATX23xNc Yg/v3Oq9YK/LgxXvQWlojVXmoVeM4kDvCfPKgYzkAaYwuImvgJYxAS2rvm4EsqwkESEl1cAY L/7vjrJdk+HpqHUeetM/OKhKZ7w8+nWKVEByt0XRN72Npzh9r1hPlbBYtvw671sTRsHLVgpb 1ae89tN8/72tcVZxs8Ifb05RH57ZYu4TLS+s0pMR/lH33XUFC9uuoHtCgkor1n97Vix4t4tj s1v2Wlfh20FCgac3NG30qDp/jbUlMSjos6sSS3FGoqEWc1FxIgBaEwNCHgMAAA==
Archived-At: <http://mailarchive.ietf.org/arch/msg/vot/uxYrBMuiZV3gYC6OdGq7ks6Sdp0>
Cc: vot@ietf.org
Subject: Re: [VoT] Security Problem with Primary Credential Usage
X-BeenThere: vot@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Vectors of Trust discussion list <vot.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/vot>, <mailto:vot-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/vot/>
List-Post: <mailto:vot@ietf.org>
List-Help: <mailto:vot-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/vot>, <mailto:vot-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 May 2016 03:16:03 -0000

I agree it's necessary, which is why It is included, but in the trustmark and not the vector. This is information that needs to be backed by a verified source and not just the word of the idp. 
It just doesn't make sense to include it in every transaction if you ask me. However, you're free to define a vector component that carries this. 
--Justin
 Sent from my phone
-------- Original message --------From: Chris <cnd@geek.net.au> Date: 5/12/16  7:57 PM  (GMT-06:00) To: Julian White <jwhite@nu-d.com> Cc: Justin Richer <jricher@mit.edu>du>, vot@ietf.org Subject: Re: [VoT] Security Problem with Primary Credential Usage 

Hi All,



I think this is unreasonable.



Trust is a two-way street.



The standard will be more-or-less useless to everyone when half of the necessary trust system is excluded/out-of-scope.



Decisions related to trust need technical data.  If I'm relying on an IdP - it makes a difference if the user typed a 4 digit PIN over HTTP, as opposed to using a biometric multi-factor auth over TLS with HSTS & Pinning with included anti-spoof and anti-malware protection.  "What went on" absolutely needs technical inclusion.



Kind Regards,

Chris Drake





Friday, May 13, 2016, 4:49:16 AM, you wrote:








That makes sense, tho that didn't come across in the description of the trustmark.

Julian

On 12 May 2016 19:45, "Justin Richer" <jricher@mit.edu> wrote:

We explicitly left those kinds of things out of the vector as they’d really be related to the IdP itself and not the authentication transaction to which the VoT refers. In other words, the security of the IdP is related to the trust framework and assessment of the IdP and it can be published as part of the IdP’s discovery documents and associated trust marks. This is information that is going to remain the same regardless of the transaction. 



This is also part of why you need to have a trustmark context to interpret the VoT in.



 — Justin



On May 12, 2016, at 11:11 AM, Julian White <jwhite@nu-d.com> wrote:



Hi,



I have a number of comments and questions (see attached), many of which are related to the issues raised by Chris, some maybe my misunderstanding coming in half way through the drafting tho.



I, like Chris, also think there needs to be something more explicit around the "security" of the IdP authentication which includes the measures to try and detect 'odd' things (like MITM). I would also go one step further in that I also want to know about the maturity of the IdP's "security", its of no use to me if they have really good credentials but store all the data in the clear on their website or have a load of administrative back-doors that could let anyone generate a valid authentication response.



It feels like we need to do more work in this area.



Regards,



Julian.



On 8 May 2016 at 13:24, Chris <cnd@geek.net.au> wrote:

Hi All,



I think there is a critical flaw in section 3.2 of https://tools.ietf.org/html/draft-richer-vectors-of-trust-02 (Primary Credential Usage)



Mutual-authentication is missing.  When no provision is made to prevent man-in-the-middle, credential harvesting, spoof, phishing, malware, or other common threats, this renders all possible vectors C0, Ca, Cb, Cd, Ce, Cf, and others equally untrustworthy.



We should consider inclusion either for the overall strength of the authentication process, or some breakdown of either all the techniques used or the strength of protection employed to thwart at least common attack scenarios.



This problem gets tricky quite fast:



Do we identify the authentication technology vendor? (if yes - who works out their resistance strength to common attacks?  what about different modes?)

Do we broadly identify the techniques (whos opinions count as to whether or not the technique is effective and against what threats?)

Do we identify or classify the threats and indicate which ones were mitigated (who should be trusted to decide if these really were mitigated?)



For example - tamper-proof hardware digital certificate devices with biometrics unlocks are totally useless, if the user paid no attention to a broken SSL warning, or has malware.  They're also equally useless in most corporate environments that use deep-packet inspection firewalls - and "unexpected certificates" (eg. from DPI or malicious) carry their own privacy problems (eg: passwords are not as "protected" as you think).  Much more common authentication "protection" of course, are two-step or sms one time codes - which are equally useless when an end user can be tricked into revealing them to spoof sites.



91% of successful break-ins start from phishing.  Right now, every vector is pointing one way - we need at least one "Vector of Trust" to point back the other way!  



How about a 5th vector - "S" for "Security", which somehow allows an RP a level of confidence in the protection afforded to the user's actual authentication process, in terms of (or at least considering) a wide range of (and all common) modern threats.



Chris.



_______________________________________________

vot mailing list

vot@ietf.org

https://www.ietf.org/mailman/listinfo/vot



<draft-richer-vectors-of-trust-02.docx>_______________________________________________

vot mailing list

vot@ietf.org

https://www.ietf.org/mailman/listinfo/vot