[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Captive-portals] putting quarantined IoT devices behind a captive portal (fwd) Michael Richardson: putting quarantined IoT devices behind a captive portal



Erik Kline <[email protected]> wrote:
    > Most discussion has, co-chair hat off, be circling around some minimal
    > working API mechanism to get things started.

    > That said, one could easily imagine, for example, something as simple
    > as an additional API boolean key,

    > "quarantined": true|false,

I think that I want to implement exactly this then.

This means providing the API info in the DHCPv4 to all devices, but
for many devices, even though there is no restriction at all. 

A concern that was recently raised is attackers that might attempt to
impersonate other devices (same L2/L3 address), and do things to trigger
quarantine.  Once you train the users to unquarantine without thinking...

-- 
]               Never tell me the odds!                 | ipv6 mesh networks [ 
]   Michael Richardson, Sandelman Software Works        | network architect  [ 
]     [email protected]  http://www.sandelman.ca/        |   ruby on rails    [ 
	

Attachment: signature.asc
Description: PGP signature