Commit 5416d699 authored by Marvin Petzolt's avatar Marvin Petzolt Committed by Aki Braun
Browse files

[Nord 5] Deleted DNSL-8

parent 819e8e61

EN-304-620.md

+2 −2
Original line number Diff line number Diff line
@@ -852,8 +852,8 @@ Requirements that mitigate this threat: ROUT, CONF, DNSL, IPv6, CRYPT 


Mitigations for Likelihood:



* Medium to Low: ROUT-1, ROUT-2, CONF-1, CONF-2, CONF-3, CONF-4, CONF-5, DNSL-1, DNSL-2, DNSL-7, DNSL-8, IPv6-1, IPv6-2

* High to Low: ROUT-1, ROUT-2, ROUT-3, CONF-1, CONF-2, CONF-3, CONF-4, CONF-5, DNSL-1, DNSL-2, DNSL-3, DNSL-4, DNSL-5, DNSL-6, DNSL-7, DNSL-8, IPv6-1, IPv6-2

* Medium to Low: ROUT-1, ROUT-2, CONF-1, CONF-2, CONF-3, CONF-4, CONF-5, DNSL-1, DNSL-2, DNSL-7, IPv6-1, IPv6-2

* High to Low: ROUT-1, ROUT-2, ROUT-3, CONF-1, CONF-2, CONF-3, CONF-4, CONF-5, DNSL-1, DNSL-2, DNSL-3, DNSL-4, DNSL-5, DNSL-6, DNSL-7, IPv6-1, IPv6-2



Mitigations for Impact:

clauses/5.Requirements.md

+0 −15
Original line number Diff line number Diff line
@@ -689,17 +689,6 @@ The VPN client shall ensure that DNS queries are not sent to non-authorized DNS 
* Verdict: No DNS queries are sent to DNS servers outside of the VPN connection.

* Evidence: Method used to induce tunnel failure, packet capture, log messages.



#### 5.2.9.9 MI-DNSL-8 Disclose DNS provider



The VPN client shall clearly inform the user about the operator of the DNS servers being used by the VPN service (e.g., "DNS resolution provided by \[product manufacturer\]" or "DNS resolution provided by Google"). This information should be easily accessible in the client's interface.



* Reference: TR-DNSL

* Objective: Inform the user about third parties handling their DNS queries

* Preparation: None

* Activities: Inspect the VPN client's user interface and any accompanying documentation.

* Verdict: The operator of the DNS service is clearly disclosed.

* Evidence: Screenshot of the relevant UI element or documentation.



### 5.2.10 TR-EISO: Endpoint isolation



#### 5.2.10.1 Requirement
@@ -1136,7 +1125,6 @@ This clause lists all the mitigations necessary to meet requirements for each se 
  1. DNSL-1

  1. DNSL-2

  1. DNSL-7

  1. DNSL-8

  1. DOST

  1. EISO

  1. FDRP
@@ -1190,7 +1178,6 @@ This clause lists all the mitigations necessary to meet requirements for each se 
  1. DNSL-5

  1. DNSL-6

  1. DNSL-7

  1. DNSL-8

  1. DOST

  1. EISO

  1. FAIR
@@ -1256,7 +1243,6 @@ This clause lists all the mitigations necessary to meet requirements for each se 
  1. DNSL-5

  1. DNSL-6

  1. DNSL-7

  1. DNSL-8

  1. DOST

  1. FAIR

  1. FDRP
@@ -1314,7 +1300,6 @@ This clause lists all the mitigations necessary to meet requirements for each se 
  1. DNSL-5

  1. DNSL-6

  1. DNSL-7

  1. DNSL-8

  1. DOST

  1. FAIR

  1. FDRP