I read through this and had a couple of quick thoughts:
1. On page 7, step 4 uses a different verb tense from the other steps.
2. This specifically talks about IPP-USB. A lot of printers
broadcast some kind of initial setup SSID when they're first plugged
in. Does it make sense to allow this mechanism when connected to that
SSID as well? This would be an improvement in convenience for the
user, especially in cases where they might not be planning to put the
printer within USB range of a computer.
Obviously it's not as secure as being physically plugged into the
printer, but in most home networks, the window where an attacker is
going to come connect a new printer to a rogue network is going to be
small. Since that SSID is specifically used for setting up the
printer, an attacker could potentially just connect to it and set up
the printer anyway.
Does this deserve some discussion in the document, either as a
possible implementation or as a reason why it's a bad idea?
Thanks,
Benjamin
On Tue, Jan 2, 2024 at 6:37 AM Michael Sweet via ipp <ipp at pwg.org> wrote:
>> All,
>> With support from Apple, I have posted an initial draft of an IPP registration document that documents the Wi-Fi configuration attributes and values that have been used by AirPrint since 2017. The goal is to have a publicly available specification so that more operating systems can support Wi-Fi setup over USB.
>> Available here:
>>https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippwifi10-20240102.docx>https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippwifi10-20240102.pdf>> ________________________
> Michael Sweet
>> _______________________________________________
> ipp mailing list
>ipp at pwg.org>https://www.pwg.org/mailman/listinfo/ipp