[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Captive-portals] Questions about PvD/API

To: David Bird <[email protected]>
Subject: Re: [Captive-portals] Questions about PvD/API
From: Lorenzo Colitti <[email protected]>
Date: Thu, 24 Aug 2017 23:40:43 +0900
Archived-at: <https://mailarchive.ietf.org/arch/msg/captive-portals/FAO9i0iIh_nR2Zc6npTNfmXpm94>
Authentication-results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Cc: Martin Thomson <[email protected]>, Erik Kline <[email protected]>, "Eric Vyncke (evyncke)" <[email protected]>, [email protected], Tommy Pauly <[email protected]>
Delivered-to: [email protected]
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=mxAQHhWToJY0gkpANWOjMDxZ4DBlmqwhxnTkqHNqJ24=; b=QVms4PYaNTEdLa4HPjNl9BTCeLpQtwcu+WXhwN9azA1ySD8sVsnL2fwk1TDedsk7fj Nk/8xvri+i+vhxdF3zzqhwEhDlCr9X/fTCllEeUtKNRjl1foJDtev+iEPJVxOI3V4tiJ 0JcvKO70YO/vglFz2SiioLOtlojA92mN8b/55IVl8UOkWQKOV7m7fGHz+w5iiPXLNong 1Ex923L/8huQpac672huPFGtB0wRNKlmIPPooFr9gmomt4TY0pjIMgSpYudCY3yldwuy Rb2KORuGYb4DSTsBqAgAzKLYcH7Am0sZvvUqM/HdwBzK9vNoZPYZzbFsxQxpX0LZW7Ad o9Qw==
In-reply-to: <CADo9JyW=wYh5y87KZrfs56fFze_VkdvUt-hF_SNeokPONxDuGA@mail.gmail.com>
List-archive: <https://mailarchive.ietf.org/arch/browse/captive-portals/>
List-help: <mailto:[email protected]?subject=help>
List-id: Discussion of issues related to captive portals <captive-portals.ietf.org>
List-post: <mailto:[email protected]>
List-subscribe: <https://www.ietf.org/mailman/listinfo/captive-portals>, <mailto:[email protected]?subject=subscribe>
List-unsubscribe: <https://www.ietf.org/mailman/options/captive-portals>, <mailto:[email protected]?subject=unsubscribe>
References: <CADo9JyU+XGYFWdNeXOBw1O43Pjyn0jZhGxDTb7VbLF+Jg4Xj4w@mail.gmail.com> <CAAedzxq4UhueFW=U-Tuc1gvG8Tapc7VE7BM2Akt9OXuzN3jLyQ@mail.gmail.com> <CADo9JyW0J7xzaosG5PJOFPHMy2g6vZ1cVpW6_YsuOdaKWqumkQ@mail.gmail.com> <[email protected]> <CADo9JyUJTPRT9454VdZEM1nwFfxPSrMX3+Uk9i325uboQUya7g@mail.gmail.com> <[email protected]> <CADo9JyVSW5==nQOUMUUYWj743LmZCUjE9=W-YXnK-KMS-88AoQ@mail.gmail.com> <CABkgnnV1OT_29fdNbCDDJMgeRDNeOM8u2PYA94opo+ujj2=Avw@mail.gmail.com> <CADo9JyUdBZbBmwE0B21ryFuefQEaTiWLHD-w8AZSyWACH9u2dg@mail.gmail.com> <CABkgnnWbhHOmZRsvpEb0XusRtUJUPp7vpdM7V_4nLnC_B-mfKQ@mail.gmail.com> <CADo9JyUP_FWznzDWDO1s9-8B8-hMAUkFAMaa68uUZ1xR8CKHyw@mail.gmail.com> <CAKD1Yr0OrthUda3+ic3g83vWEpBATpcF4Z=4ENNg+ZuyySDMdg@mail.gmail.com> <CADo9JyW=wYh5y87KZrfs56fFze_VkdvUt-hF_SNeokPONxDuGA@mail.gmail.com>

A forged destination unreachable can't cause someone else's device to think that wifi is a portal and switch to possibly expensive cellular data.

On Thu, Aug 24, 2017 at 11:29 PM, David Bird <[email protected]> wrote:

Just like the rampant problem we see in ICMP Dest-Unreachable forgery attacks?

On Thu, Aug 24, 2017 at 7:01 AM, Lorenzo Colitti <[email protected]> wrote:
On Thu, Aug 24, 2017 at 10:40 PM, David Bird <[email protected]> wrote:
Can you give an example of how ICMP could be misconfigured?

It doesn't matter how hard it is to misconfigure, because it is trivial to forge.

Follow-Ups:
- Re: [Captive-portals] Questions about PvD/API
  - From: Tommy Pauly <[email protected]>

References:
- [Captive-portals] Questions about PvD/API
  - From: David Bird <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: Erik Kline <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: David Bird <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: Tommy Pauly <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: David Bird <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: Tommy Pauly <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: David Bird <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: Martin Thomson <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: David Bird <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: Martin Thomson <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: David Bird <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: Lorenzo Colitti <[email protected]>
- Re: [Captive-portals] Questions about PvD/API
  - From: David Bird <[email protected]>

Prev by Date: Re: [Captive-portals] Questions about PvD/API
Next by Date: Re: [Captive-portals] Questions about PvD/API
Previous by thread: Re: [Captive-portals] Questions about PvD/API
Next by thread: Re: [Captive-portals] Questions about PvD/API
Index(es):
- Date
- Thread