2015-05-30 11:05:37 +00:00
|
|
|
.\" Man page generated from reStructuredText.
|
|
|
|
|
.
|
2015-06-14 11:52:00 +00:00
|
|
|
.TH "SYNCTHING-SECURITY" "7" "June 14, 2015" "v0.11" "Syncthing"
|
2015-05-30 11:05:37 +00:00
|
|
|
.SH NAME
|
|
|
|
|
syncthing-security \- Security Principles
|
|
|
|
|
.
|
|
|
|
|
.nr rst2man-indent-level 0
|
|
|
|
|
.
|
|
|
|
|
.de1 rstReportMargin
|
|
|
|
|
\\$1 \\n[an-margin]
|
|
|
|
|
level \\n[rst2man-indent-level]
|
|
|
|
|
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
|
-
|
|
|
|
|
\\n[rst2man-indent0]
|
|
|
|
|
\\n[rst2man-indent1]
|
|
|
|
|
\\n[rst2man-indent2]
|
|
|
|
|
..
|
|
|
|
|
.de1 INDENT
|
|
|
|
|
.\" .rstReportMargin pre:
|
|
|
|
|
. RS \\$1
|
|
|
|
|
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
|
|
|
|
|
. nr rst2man-indent-level +1
|
|
|
|
|
.\" .rstReportMargin post:
|
|
|
|
|
..
|
|
|
|
|
.de UNINDENT
|
|
|
|
|
. RE
|
|
|
|
|
.\" indent \\n[an-margin]
|
|
|
|
|
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
|
.nr rst2man-indent-level -1
|
|
|
|
|
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
|
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
|
|
|
|
|
..
|
|
|
|
|
.sp
|
|
|
|
|
Security is one of the primary project goals. This means that it should not be
|
|
|
|
|
possible for an attacker to join a cluster uninvited, and it should not be
|
|
|
|
|
possible to extract private information from intercepted traffic. Currently this
|
|
|
|
|
is implemented as follows.
|
|
|
|
|
.sp
|
|
|
|
|
All traffic is protected by TLS. To prevent uninvited nodes from joining a
|
|
|
|
|
cluster, the certificate fingerprint of each node is compared to a preset list
|
|
|
|
|
of acceptable nodes at connection establishment. The fingerprint is computed as
|
|
|
|
|
the SHA\-256 hash of the certificate and displayed in BASE32 encoding to form a
|
|
|
|
|
reasonably compact and convenient string.
|
|
|
|
|
.sp
|
|
|
|
|
Incoming requests for file data are verified to the extent that the requested
|
|
|
|
|
file name must exist in the local index and the global model.
|
|
|
|
|
.sp
|
|
|
|
|
For information about ensuring you are running the code you think you are and
|
|
|
|
|
for reporting security vulnerabilities, please see the official \fI\%security page\fP <\fBhttp://syncthing.net/security.html\fP>\&.
|
|
|
|
|
.SH INFORMATION LEAKAGE
|
|
|
|
|
.SS Global Discovery
|
|
|
|
|
.sp
|
|
|
|
|
When global discovery is enabled, Syncthing sends an announcement packet every
|
|
|
|
|
30 minutes to the global discovery server, so that it can keep a mapping between
|
|
|
|
|
your device ID and external IP. Also, when connecting to other devices that have
|
|
|
|
|
not been seen on the local network, a query is sent to the global discovery
|
|
|
|
|
server containing the device ID of the requested device. The discovery server is
|
2015-06-02 06:33:36 +00:00
|
|
|
currently hosted by \fI\%@calmh\fP <\fBhttps://github.com/calmh\fP>\&. Global discovery defaults to \fBon\fP\&.
|
2015-05-30 11:05:37 +00:00
|
|
|
.sp
|
|
|
|
|
When turned off, devices with dynamic addresses not on the local network cannot
|
|
|
|
|
be found and connected to.
|
|
|
|
|
.sp
|
|
|
|
|
If a different global discovery server is configured, no data is sent to the
|
|
|
|
|
default global discovery server.
|
|
|
|
|
.SS Local Discovery
|
|
|
|
|
.sp
|
|
|
|
|
When local discovery is enabled, Syncthing sends broadcast (IPv4) and multicast
|
|
|
|
|
(IPv6) packets to the local network every 30 seconds. The packets contain the
|
|
|
|
|
device ID and listening port. Local discovery defaults to \fBon\fP\&.
|
|
|
|
|
.sp
|
|
|
|
|
An eavesdropper on the local network can deduce which machines are running
|
|
|
|
|
Syncthing with local discovery enabled, and what their device IDs are.
|
|
|
|
|
.sp
|
|
|
|
|
When turned off, devices with dynamic addresses on the local network cannot be
|
|
|
|
|
found and connected to.
|
|
|
|
|
.SS Upgrade Checks
|
|
|
|
|
.sp
|
|
|
|
|
When automatic upgrades are enabled, Syncthing checks for a new version at
|
|
|
|
|
startup and then once every twelve hours. This is by an HTTPS request to the
|
|
|
|
|
download site for releases, currently \fBhosted at GitHub\fP\&. Automatic upgrades
|
|
|
|
|
default to \fBon\fP (unless Syncthing was compiled with upgrades disabled).
|
|
|
|
|
.sp
|
|
|
|
|
Even when automatic upgrades are disabled in the configuration, an upgrade check
|
|
|
|
|
as above is done when the GUI is loaded, in order to show the "Upgrade to ..."
|
|
|
|
|
button when necessary. This can be disabled only by compiling syncthing with
|
|
|
|
|
upgrades disabled.
|
|
|
|
|
.sp
|
|
|
|
|
In effect this exposes the majority of the Syncthing population to tracking by
|
|
|
|
|
the operator of the download site (currently GitHub). That data is not available
|
2015-06-02 06:33:36 +00:00
|
|
|
to outside parties (including \fI\%@calmh\fP <\fBhttps://github.com/calmh\fP> etc), except that download counts
|
|
|
|
|
per release binary are available in the GitHub API. The upgrade check (or
|
|
|
|
|
download) requests \fIdo not\fP contain any identifiable information about the user,
|
|
|
|
|
device, Syncthing version, etc.
|
2015-05-30 11:05:37 +00:00
|
|
|
.SS Usage Reporting
|
|
|
|
|
.sp
|
|
|
|
|
When usage reporting is enabled, Syncthing reports usage data at startup and
|
|
|
|
|
then every 24 hours. The report is sent as an HTTPS POST to the usage reporting
|
2015-06-02 06:33:36 +00:00
|
|
|
server, currently hosted by \fI\%@calmh\fP <\fBhttps://github.com/calmh\fP>\&. The contents of the usage report can
|
|
|
|
|
be seen behind the "Preview" link in settings. Usage reporting defaults to
|
|
|
|
|
\fBoff\fP but the GUI will ask once about enabling it, shortly after the first
|
|
|
|
|
install.
|
2015-05-30 11:05:37 +00:00
|
|
|
.sp
|
|
|
|
|
The reported data is protected from eavesdroppers, but the connection to the
|
|
|
|
|
usage reporting server itself may expose the client as running Syncthing.
|
|
|
|
|
.SS Sync Connections (BEP)
|
|
|
|
|
.sp
|
|
|
|
|
Sync connections are attempted to all configured devices, when the address is
|
|
|
|
|
possible to resolve. The sync connection is based on TLS 1.2. The TLS
|
|
|
|
|
certificates are sent in clear text (as in HTTPS etc), meaning that the
|
|
|
|
|
certificate Common Name (by default \fBsyncthing\fP) is visible.
|
|
|
|
|
.sp
|
|
|
|
|
An eavesdropper can deduce that this is a Syncthing connection and calculate the
|
|
|
|
|
device ID:s involved based on the hashes of the sent certificates.
|
|
|
|
|
.sp
|
|
|
|
|
Likewise, if the sync port (default 22000) is accessible from the internet, a
|
|
|
|
|
port scanner may discover it, attempt a TLS negotiation and thus obtain the
|
|
|
|
|
device certificate. This provides the same information as in the eavesdropper
|
|
|
|
|
case.
|
|
|
|
|
.SS Web GUI
|
|
|
|
|
.sp
|
|
|
|
|
If the web GUI is accessible, it exposes the device as running Syncthing. The
|
|
|
|
|
web GUI defaults to being reachable from the \fBlocal host only\fP\&.
|
|
|
|
|
.SH IN SHORT
|
|
|
|
|
.sp
|
|
|
|
|
Parties doing surveillance on your network (whether that be corporate IT, the
|
|
|
|
|
NSA or someone else) will be able to see that you use Syncthing, and your device
|
|
|
|
|
ID\(aqs \fI\%are OK to share anyway\fP <\fBhttp://docs.syncthing.net/users/faq.html#should-i-keep-my-device-ids-secret\fP>,
|
|
|
|
|
but the actual transmitted data is protected as well as we can. Knowing your
|
|
|
|
|
device ID can expose your IP address, using global discovery.
|
|
|
|
|
.SH AUTHOR
|
|
|
|
|
The Syncthing Authors
|
|
|
|
|
.SH COPYRIGHT
|
|
|
|
|
2015, The Syncthing Authors
|
|
|
|
|
.\" Generated by docutils manpage writer.
|
|
|
|
|
.
|
