[openscreenprotocol] Pull Request: Adds an unguessable token to mDNS. from Mark Foltz \(Google\) via GitHub on 2019-08-08 (public-webscreens@w3.org from August 2019)

From: Mark Foltz \(Google\) via GitHub <sysbot+gh@w3.org>
Date: Thu, 08 Aug 2019 21:54:34 +0000
To: public-webscreens@w3.org
Message-ID: <pull_request.opened-305763467-1565301273-sysbot+gh@w3.org>

mfoltzgoogle has just submitted a new pull request for https://github.com/webscreens/openscreenprotocol:

== Adds an unguessable token to mDNS. ==
This PR addresses Issue #131 (Mitigations for remote network attackers) by adding an unguessable token to the mDNS TXT record.

This token must be included in the first authentication message sent to/from the agent that advertises it, to prevent remote attackers from attempting authentication.

It also fixes a couple of typos in the authentication section and clarifies that SPAKE2 is mandatory for agents to implement.
 

See https://github.com/webscreens/openscreenprotocol/pull/182

Received on Thursday, 8 August 2019 21:54:36 UTC