Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: howto_ims.md: include disabling SQN without explanation why this is even needed. #43

Open
lynxis opened this issue Nov 16, 2024 · 2 comments
Labels
documentation Improvements or additions to documentation

Comments

@lynxis
Copy link

lynxis commented Nov 16, 2024

Feature Request

Summary

https://github.com/omnt/OpenMobileNetworkToolkit/blob/main/docs/howto_ims.md
describes how to disable SQN checking.
However this is only needed if your core network doesn't contain a common HSS.
E.g. in early howtos this was required, because the howto required to have 2 HSS which doesn't share the
sequence numbers (e.g. open5gs-hss + pyhss).
However it is now possible to use either open5gs-hss or pyhss for both, the IMS authentication and the LTE core network authentication.

It would be great to mention the reason and describe this step doesn't hurt, but is only required if the core network uses a split brain HSS.

@laf0rge
Copy link

laf0rge commented Nov 21, 2024

Any documentation recommending disabling a security feature should also give an explanation of the consequences of doing so, warn against doing it without fully understanding the consequences, and reference related documentation/publications about said security mechanism.

SQN checking protects against replay attacks. Disabling that check consequently exposes you to them.

@derpeter
Copy link
Contributor

Thank you both for the comments. @errdemk can i ask you to update the documentation?

@derpeter derpeter added the documentation Improvements or additions to documentation label Dec 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

3 participants