Opened 5 years ago

Closed 5 years ago

#1217 closed defect (fixed)

Encrypt DeliveryStatusMessages

Reported by: zzz Owned by: zzz
Priority: minor Milestone: 0.9.12
Component: router/general Version: 0.9.11
Keywords: Cc:
Parent Tickets: Sensitive: no

Description

These are not encrypted now. The DSM should be transparent to the far-end and the reply OBEP and IBGW. Investigate what information unencrypted DSMs could reveal and set priority for the work.

We can AES encrypt to a local SessionTag? as we do in the (mostly unused) tunnel.pool.TestJob?. This is different than sending a tag and asking the other end to encrypt back. Be sure of course to use the correct SKM.

This should not violate the no garlic-in-garlic restriction as that is only for local delivery.

Subtickets

Change History (3)

comment:1 Changed 5 years ago by zzz

Owner: set to zzz
Status: newaccepted

testing

comment:2 Changed 5 years ago by zzz

Milestone: 0.9.150.9.12

comment:3 Changed 5 years ago by zzz

Resolution: fixed
Status: acceptedclosed
Note: See TracTickets for help on using tickets.