From nobody Mon Jun 1 00:18:45 2015 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E2F01A8AAB for ; Mon, 1 Jun 2015 00:18:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GyL_7G0J4QXM for ; Mon, 1 Jun 2015 00:18:42 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B34C81A895C for ; Mon, 1 Jun 2015 00:18:40 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BTE40100; Mon, 01 Jun 2015 07:18:38 +0000 (GMT) Received: from LHREML504-MBS.china.huawei.com ([10.125.30.107]) by lhreml403-hub.china.huawei.com ([::1]) with mapi id 14.03.0158.001; Mon, 1 Jun 2015 08:18:06 +0100 From: Hosnieh Rafiee To: "dnssd@ietf.org" Thread-Topic: I-D Action: draft-rafiee-dnssd-mdns-threatmodel-03.txt Thread-Index: AQHQmwqaRsT77YEEEECJOsoTjJbFT52XP+0Q Date: Mon, 1 Jun 2015 07:18:05 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A70154C4DA@lhreml504-mbs> References: <20150530185803.18524.17824.idtracker@ietfa.amsl.com> In-Reply-To: <20150530185803.18524.17824.idtracker@ietfa.amsl.com> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.118] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [dnssd] I-D Action: draft-rafiee-dnssd-mdns-threatmodel-03.txt X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussion of extensions to Bonjour \(mDNS and DNS-SD\) for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2015 07:18:43 -0000 All, I have submitted a new version of threat model. Your review is highly appreciated. Thanks, Best, Hosnieh > A New Internet-Draft is available from the on-line Internet-Drafts > directories. >=20 >=20 > Title : Multicast DNS (mDNS) Threat Model and > Security Consideration > Author : Hosnieh Rafiee > Filename : draft-rafiee-dnssd-mdns-threatmodel-03.txt > Pages : 12 > Date : 2015-05-30 >=20 > Abstract: > This document describes threats only specific to extending multicast > DNS (mDNS) across layer 3. >=20 >=20 >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-rafiee-dnssd-mdns-threatmodel/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-rafiee-dnssd-mdns-threatmodel-03 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-rafiee-dnssd-mdns-threatmodel- > 03 >=20 >=20 > Please note that it may take a couple of minutes from the time of > submission until the htmlized version and diff are available at > tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html or > ftp://ftp.ietf.org/ietf/1shadow-sites.txt From nobody Tue Jun 2 19:41:04 2015 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15E291B2C3A for ; Tue, 2 Jun 2015 19:41:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zEN_FRDiY6GN for ; Tue, 2 Jun 2015 19:41:00 -0700 (PDT) Received: from mail-pa0-x22f.google.com (mail-pa0-x22f.google.com [IPv6:2607:f8b0:400e:c03::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B83361B2C31 for ; Tue, 2 Jun 2015 19:41:00 -0700 (PDT) Received: by payr10 with SMTP id r10so63390227pay.1 for ; Tue, 02 Jun 2015 19:41:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=kfrCjfiSgCnGEIe5+O0rATcI7CjtSOq7/E3ynGE0R4g=; b=ZMLWYUMGJ6hHgVHmGaQVwXeDbUPnvNliIWR1s4cdU623aQ4wDvEp45Y1+ni1vQ1yJS BgHhBabFkoWQnAOBYrTEWBH1RploZLx2eXBfjLuw4mE+a5BDLzNT/OwjdqbbKS2PFoAo K2lM9qOF/IA5aO+bbOlE0fSCFW3cyWrL4MSPNYdl3qRpnwD4KhHJJWKYppnYHSzcyMVh e9i/EMDHXG6UZ4npVMExIlgfr1AbDVb3aKGckVeV1au0sRwNx4frLGHay8jUOf7fJ6AT /o9F3+ld5yIZkNfhqp9dN/m0+P1dzTZ4XWhdMzXu61DN841CQTgccAjmqtdTFWHKDj1S g3LA== X-Received: by 10.68.113.194 with SMTP id ja2mr17641446pbb.163.1433299260358; Tue, 02 Jun 2015 19:41:00 -0700 (PDT) Received: from US-DOUGO-MAC.local (107-0-5-6-ip-static.hfc.comcastbusiness.net. [107.0.5.6]) by mx.google.com with ESMTPSA id ra3sm18839357pbb.23.2015.06.02.19.40.57 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 02 Jun 2015 19:40:58 -0700 (PDT) Message-ID: <556E6936.1070205@gmail.com> Date: Tue, 02 Jun 2015 19:40:54 -0700 From: Douglas Otis User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: dnssd@ietf.org References: <20150530185803.18524.17824.idtracker@ietfa.amsl.com> <814D0BFB77D95844A01CA29B44CBF8A70154C4DA@lhreml504-mbs> In-Reply-To: <814D0BFB77D95844A01CA29B44CBF8A70154C4DA@lhreml504-mbs> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [dnssd] I-D Action: draft-rafiee-dnssd-mdns-threatmodel-03.txt X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussion of extensions to Bonjour \(mDNS and DNS-SD\) for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2015 02:41:02 -0000 On 6/1/15 12:18 AM, Hosnieh Rafiee wrote: > There's also a htmlized version available at: > > https://tools.ietf.org/html/draft-rafiee-dnssd-mdns-threatmodel-03 Dear Hosnieh, This review misses a concern called out in the CERT notice for dnssd at https://www.kb.cert.org/vuls/id/550620 See Section 1 of https://tools.ietf.org/html/draft-otis-dnssd-mdns-xlink-06 The threat model also overlooks data leakage beyond a local link and DNS amplification concerns resulting from the browse-ability offered by resource structures as explained in the introduction and the CERT notice. Appendix A gives an example of data leakage exploited in Appendix B. A mitigation practice to overcome these risks remains unclear unless some means is made available to limit results. Regards, Douglas Otis From nobody Sun Jun 21 02:17:02 2015 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90E731A6EED for ; Sun, 21 Jun 2015 02:17:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.23 X-Spam-Level: X-Spam-Status: No, score=-1.23 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qCJy0O-G5m3F for ; Sun, 21 Jun 2015 02:16:59 -0700 (PDT) Received: from falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [IPv6:2001:630:d0:f102::25e]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 461B61A6EE6 for ; Sun, 21 Jun 2015 02:16:58 -0700 (PDT) Received: from falcon.ecs.soton.ac.uk (localhost.ecs.soton.ac.uk [127.0.0.1]) by falcon.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id t5L9Gtvq013742 for ; Sun, 21 Jun 2015 10:16:55 +0100 X-DKIM: Sendmail DKIM Filter v2.8.2 falcon.ecs.soton.ac.uk t5L9Gtvq013742 DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=ecs.soton.ac.uk; s=201304; t=1434878215; bh=yxAgPLXFq2P0/8w8aIvMg4Uu5RY=; h=From:Subject:Date:References:To:Mime-Version; b=ObXWUnHPryWZa51lAsnOa2iZHbSUjBPoHxnedru2ALeFE6tV4MngZg7F4RAwvzoF6 XGr71aShwg39jNxx+k/PLtI7W13QH+eqF0SuWfZS+BYGefuaYnAGH73dvK/r/chezm aojDYWdFocSXv86KIWHaZhHYKDKsj7PqarpbEugk= Received: from gander.ecs.soton.ac.uk ([2001:630:d0:f102:250:56ff:fea0:401]) by falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [2001:630:d0:f102:250:56ff:fea0:68da]) envelope-from with ESMTP (valid=N/A) id r5KAGy1675703678s2 ret-id none; Sun, 21 Jun 2015 10:16:55 +0100 Received: from [192.168.0.5] (tchowndsl.claranet.co.uk [212.188.254.49]) (authenticated bits=0) by gander.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id t5L9Gsf9005204 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 21 Jun 2015 10:16:55 +0100 From: Tim Chown Content-Type: multipart/alternative; boundary="Apple-Mail=_EC56A3E1-952E-46BF-A03D-8A6C77D1A496" Date: Sun, 21 Jun 2015 10:16:54 +0100 References: <20150619232740.1236.55980.idtracker@ietfa.amsl.com> To: dnssd@ietf.org Message-ID: Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) X-Mailer: Apple Mail (2.2098) X-smtpf-Report: sid=r5KAGy167570367800; tid=r5KAGy1675703678s2; client=relay,forged,no_ptr,ipv6; mail=; rcpt=; nrcpt=1:0; fails=0 X-ECS-MailScanner-Information: Please contact the ISP for more information X-ECS-MailScanner-ID: t5L9Gtvq013742 X-ECS-MailScanner: Found to be clean X-ECS-MailScanner-From: tjc@ecs.soton.ac.uk Archived-At: Subject: [dnssd] IETF 93 Preliminary Agenda - dnssd session X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussion of extensions to Bonjour \(mDNS and DNS-SD\) for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Jun 2015 09:17:01 -0000 --Apple-Mail=_EC56A3E1-952E-46BF-A03D-8A6C77D1A496 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, You may well have seen it elsewhere, but the preliminary IETF agenda is = out. The dnssd meeting is currently scheduled for 9.00am-11.30am CEST on Wed = 22nd July. We requested a 2 hour slot, but have been given more. If you have agenda items, please let me (or Ralph) know. Tim > Begin forwarded message: >=20 > From: IETF Agenda > Subject: IETF 93 Preliminary Agenda > Date: 20 June 2015 00:27:40 BST > To: "Working Group Chairs" > Cc: irsg@irtf.org > Reply-To: IETF Agenda >=20 >=20 > The IETF 93 preliminary agenda has been posted. The final agenda will = be published on Friday, June 26th, 2015. =20 >=20 > If you would like to request a change to the preliminary agenda, = please send a message to agenda@ietf.org and copy all relevant Area = Directors. >=20 > Please note the cut-off date for requests to reschedule Working Group = sessions and BOFs is Wednesday, June 24th, 2015 at UTC 23:59. >=20 > https://datatracker.ietf.org/meeting/93/agenda.html > https://datatracker.ietf.org/meeting/93/agenda.txt >=20 > Thank you! >=20 > IETF Secretariat >=20 --Apple-Mail=_EC56A3E1-952E-46BF-A03D-8A6C77D1A496 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi,

You = may well have seen it elsewhere, but the preliminary IETF agenda is = out.

The dnssd meeting is currently scheduled for 9.00am-11.30am CEST on Wed = 22nd July. We requested a 2 hour slot, but have been given = more.

If you = have agenda items, please let me (or Ralph) know.

Tim

Begin forwarded message:

From: = IETF Agenda <agenda@ietf.org>
Subject: = IETF 93 = Preliminary Agenda
Date: = 20 June 2015 00:27:40 BST
To: = "Working Group Chairs" <wgchairs@ietf.org>
Cc: = irsg@irtf.org
Reply-To: = IETF Agenda <agenda@ietf.org>


The = IETF 93 preliminary agenda has been posted.  The final agenda will = be published on Friday, June 26th, 2015.  

If you would like to request a change to the preliminary = agenda, please send a message to agenda@ietf.org and copy all relevant Area Directors.

Please note the cut-off date for requests to = reschedule Working Group sessions and BOFs is Wednesday, June 24th, 2015 = at UTC 23:59.

https://datatracker.ietf.org/meeting/93/agenda.html
https://datatracker.ietf.org/meeting/93/agenda.txt

Thank you!

IETF = Secretariat


= --Apple-Mail=_EC56A3E1-952E-46BF-A03D-8A6C77D1A496-- From nobody Tue Jun 23 18:26:51 2015 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B13C1B3163 for ; Tue, 23 Jun 2015 18:26:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9B0vVSASLKfX for ; Tue, 23 Jun 2015 18:26:48 -0700 (PDT) Received: from mail-pd0-x235.google.com (mail-pd0-x235.google.com [IPv6:2607:f8b0:400e:c02::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 891B01B333D for ; Tue, 23 Jun 2015 18:26:48 -0700 (PDT) Received: by pdbki1 with SMTP id ki1so18691982pdb.1 for ; Tue, 23 Jun 2015 18:26:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type:content-transfer-encoding; bh=Oapviu8m0DV49hvaIeN/1Znxlpg/18s2iic9TZqmw9U=; b=qgHm1VWltVMR9WULmU3hOxkOs31HyZS/LfHa2zKVq2MLLNsY27oybNz/ub35x+D4Oz mxpb7GfW1VrN3U1ahwFcm0P1zjE1Dc3PunB2encjYMTPSER2Mlin9LictSNSBfR+Dq/l 4OdapO0eHG1l0mLT2i5xmkaNAoEFHnNfnRSV68PdwjoqHQNbXwf+i9osh2OCvxowxZwm /Eutc1DvXq/DPDghDZxZay2wyaD0rQHECc9/+pcKX0vYfMdZ3JnTJRVJ7FXVbdpjK/NA sksbt5vT++iLkbs/Ymzbcn/V/sjaCi0ynxOhhIondFA2Se0uxwWAFfQTsiRK8MjewnQd f55Q== X-Received: by 10.68.57.239 with SMTP id l15mr75479034pbq.130.1435109208204; Tue, 23 Jun 2015 18:26:48 -0700 (PDT) Received: from US-DOUGO-MAC.local (107-0-5-6-ip-static.hfc.comcastbusiness.net. [107.0.5.6]) by mx.google.com with ESMTPSA id u7sm21461073pdo.49.2015.06.23.18.26.45 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 23 Jun 2015 18:26:46 -0700 (PDT) To: dnssd@ietf.org References: <20150619232740.1236.55980.idtracker@ietfa.amsl.com> From: Douglas Otis X-Enigmail-Draft-Status: N1110 Message-ID: <558A0752.6080900@gmail.com> Date: Tue, 23 Jun 2015 18:26:42 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.0.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [dnssd] IETF 93 Preliminary Agenda - dnssd session X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Discussion of extensions to Bonjour \(mDNS and DNS-SD\) for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Jun 2015 01:26:50 -0000 _Added on Etherpad93 Meeting Agenda for WEDNESDAY, July 22, 2015 dnssd WG meeting. Security concerns when attempting to achieve near-zero configuration: _1) Restricting traffic at the local link. 2) Restricting unintended Access _ _ see: https://tools.ietf.org/html/draft-otis-dnssd-mdns-xlink-05#appendix-B_ _3) Controlling Look-Alike Spoofing attacks. 4) Minimizing DDoS related issues see: https://tools.ietf.org/html/draft-otis-dnssd-mdns-xlink-05#ref-CERTvu550620 5) Ensuring good Wifi performance by reducing amount of multicast. 6) Conventions for preventing/allowing namespace otherwise prohibited by IDNA2008 or registrars. 7) Critical dnssd proxy nodes must employ https://tools.ietf.org/html/rfc7113 IPv6 input node frame validation to better leverage routers. Regards, Douglas Otis On 6/21/15 2:16 AM, Tim Chown wrote: > Hi, > > You may well have seen it elsewhere, but the preliminary IETF agenda is out. > > The dnssd meeting is currently scheduled for 9.00am-11.30am CEST on Wed 22nd July. We requested a 2 hour slot, but have been given more. > > If you have agenda items, please let me (or Ralph) know. > > Tim > >> Begin forwarded message: >> >> From: IETF Agenda >> Subject: IETF 93 Preliminary Agenda >> Date: 20 June 2015 00:27:40 BST >> To: "Working Group Chairs" >> Cc: irsg@irtf.org >> Reply-To: IETF Agenda >> >> >> The IETF 93 preliminary agenda has been posted. The final agenda will be published on Friday, June 26th, 2015. >> >> If you would like to request a change to the preliminary agenda, please send a message to agenda@ietf.org and copy all relevant Area Directors. >> >> Please note the cut-off date for requests to reschedule Working Group sessions and BOFs is Wednesday, June 24th, 2015 at UTC 23:59. >> >> https://datatracker.ietf.org/meeting/93/agenda.html >> https://datatracker.ietf.org/meeting/93/agenda.txt >> >> Thank you! >> >> IETF Secretariat >> > > > > _______________________________________________ > dnssd mailing list > dnssd@ietf.org > https://www.ietf.org/mailman/listinfo/dnssd