Friday, September 18, 2009

[Geopriv] [geopriv] #23: Good Security of DHCP

#23: Good Security of DHCP
---------------------------------------+------------------------------------
Reporter: Hannes.Tschofenig@gmx.net | Owner:
Type: enhancement | Status: new
Priority: major | Milestone: draft-ietf-geopriv-3825bis
Component: rfc3825bis | Version:
Severity: - | Keywords:
---------------------------------------+------------------------------------
In recent discussions around the term LCP the good security and privacy
properties of DHCP were highly praised.

In a shared medium an adversary is able to see DHCP message (that include
location information) unless link layer encryption is utilized. Such an
attack might, for example, compromise the privacy of hotel guests. Hotel
networks very rarely use link layer security due to their unfriendly
configuration approaches.

I believe that this (and maybe other attacks) have to be added to the
security and privacy considerations section.

--
Ticket URL: <https://svn.tools.ietf.org/wg/geopriv/trac/ticket/23>
geopriv <http://tools.ietf.org/geopriv/>

_______________________________________________
Geopriv mailing list
Geopriv@ietf.org
https://www.ietf.org/mailman/listinfo/geopriv