Change in osmo-remsim[master]: doc: Add WARNINGs about lack of security in protocols

This is merely a historical archive of years 2008-2021, before the migration to mailman3.

A maintained and still updated list archive can be found at https://lists.osmocom.org/hyperkitty/list/gerrit-log@lists.osmocom.org/.

laforge gerrit-no-reply at lists.osmocom.org
Wed Mar 4 14:52:45 UTC 2020


laforge has uploaded this change for review. ( https://gerrit.osmocom.org/c/osmo-remsim/+/17345 )


Change subject: doc: Add WARNINGs about lack of security in protocols
......................................................................

doc: Add WARNINGs about lack of security in protocols

Change-Id: I72c0b797fda220b9efcc86bd08717585063db591
---
M doc/manuals/chapters/remsim-server.adoc
M doc/manuals/chapters/rspro.adoc
2 files changed, 10 insertions(+), 0 deletions(-)



  git pull ssh://gerrit.osmocom.org:29418/osmo-remsim refs/changes/45/17345/1

diff --git a/doc/manuals/chapters/remsim-server.adoc b/doc/manuals/chapters/remsim-server.adoc
index e5c80c7..5215b54 100644
--- a/doc/manuals/chapters/remsim-server.adoc
+++ b/doc/manuals/chapters/remsim-server.adoc
@@ -26,6 +26,11 @@
 
 The API currently has version 1, and the URL prefix is /api/backend/v1
 
+WARNING: The RESTful/JSON Web API operates in plain-text,
+There is no authentication or encryption built into the protocol.  It is
+assumed that the protocol is only spoken over trusted, controlled IP
+networks, such as inside a VPN or a closed / private corporate network.
+
 ==== /api/backend/v1/clients
 
 *GET* obtains a JSON list where each element represents one currently
diff --git a/doc/manuals/chapters/rspro.adoc b/doc/manuals/chapters/rspro.adoc
index 1ce511e..ce39b9d 100644
--- a/doc/manuals/chapters/rspro.adoc
+++ b/doc/manuals/chapters/rspro.adoc
@@ -8,6 +8,11 @@
 `osmo-remsim` source code) and uses BER (Basic Encoding Rules) on the
 transport level.
 
+WARNING: RSPRO and its underlying transport layer both operate in plain-text,
+There is no authentication or encryption built into the protocol.  It is
+assumed that the protocol is only spoken over trusted, controlled IP
+networks, such as inside a VPN or a closed / private corporate network.
+
 === Underlying Transport Layer
 
 RSPRO uses TCP as an underlying transport protocol.  As TCP doesn't

-- 
To view, visit https://gerrit.osmocom.org/c/osmo-remsim/+/17345
To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings

Gerrit-Project: osmo-remsim
Gerrit-Branch: master
Gerrit-Change-Id: I72c0b797fda220b9efcc86bd08717585063db591
Gerrit-Change-Number: 17345
Gerrit-PatchSet: 1
Gerrit-Owner: laforge <laforge at osmocom.org>
Gerrit-MessageType: newchange
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/gerrit-log/attachments/20200304/2ea3cb95/attachment.htm>


More information about the gerrit-log mailing list