Verified Commit 31267aca authored by Valerie Aurora's avatar Valerie Aurora Committed by Aki Braun
Browse files

Annex C.2.10: explain rationale for increased risk

closes #351
parent 1a3e6dc7
Loading
Loading
Loading
Loading
+1 −1
Original line number Diff line number Diff line
@@ -757,7 +757,7 @@ Rationale: More features mean more code and more interfaces mean attack surface.

Description: Whether the VPN connects different endpoints to each other via a private network or simply provides a tunnel from a single endpoint to a public network

Rationale: Different connectivity requirements create different risks and mitigations.
Rationale: More endpoints able to connect to each other within the private network means more risk of compromise via the shared private network connectivity and greater privileges often granted to endpoints sharing the private network.

* **[CON-0]** Usage is a single endpoint connecting only to a public network
* **[CON-1]** Usage is one or more endpoints connecting to other endpoints or hosts via a private network