Subject: Re: [dnssd] draft-ietf-dnssd-requirements-04

From: "Hosnieh Rafiee" <[email-masked]>
Date: Sat, 1 Nov 2014 09:21:24 +0100

Hi Douglas,

Some parts of that should be in threat model. If you think something is
still missing from threat model, you can contribute text and add it.
At the moment the threat model only focused on charter and requirement
document.

Best,
Hosnieh

> -----Original Message-----
> From: dnssd [mailto:[email-masked]] On Behalf Of Douglas Otis
> Sent: Saturday, November 01, 2014 12:59 AM
> To: [email-masked]
> Cc: Douglas Otis
> Subject: [dnssd] draft-ietf-dnssd-requirements-04
> 
> Dear dnssd wg,
> 
> The requirements draft still has failed to consider new security
considerations
> caused by exposing link-local information to adjacent networks.  This goes
well
> beyond being mere unions of mDNS and DNSSD issues.
> 
> One solution might involve use of overlay network addressing, for example.
> Without a well considered strategy, no firewall will be able protect local
> networks.
> 
> Regards,
> Douglas Otis
> _______________________________________________
> dnssd mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/dnssd