Verified Commit 56a80b24 authored by Valerie Aurora's avatar Valerie Aurora Committed by Aki Braun
Browse files

Annex C.2.10: Add guidance to COM risk factor

closes #348
parent 657293d6
Loading
Loading
Loading
Loading
+2 −0
Original line number Diff line number Diff line
@@ -755,6 +755,8 @@ Rationale: More features mean more code and more interfaces mean attack surface.
* **[COM-1]** Usage requires a few additional features related to tunnelling encrypted traffic
* **[COM-2]** Usage requires many additional features

Guidance: At present, the complexity of the implementation and the exposed interfaces are accounted for in a single risk factor. This is sufficienty for the security analysis in the present document but may need to separated into two risk factors for future versions.

### C.2.10 RF-CON: Connectivity offered

Description: Whether the VPN connects different endpoints to each other via a private network or simply provides a tunnel from a single endpoint to a public network