Threat model for "SecureDrop"

Component: Landing page

Defined in model.py:304

News org's public landing page advertising the onion address.

boundary: External Services is exposed uses network

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
Landing page source control is compromised THREAT57 inform 12 high 6 medium Landing page deployment guide explains some security best practices for the webserver hosting the onion URL
Landing page host is compromised THREAT58 inform 12 high 6 medium Landing page deployment guide explains some security best practices for the webserver hosting the onion URL
Landing page DNS leaks from Securedrop/leaks-related subdomain THREAT59 inform 8 high 6 medium Landing page subdomains discouraged
Landing page TLS private key compromised THREAT122 partially mitigated 6 medium 6 medium Landing page deployment guide explains some security best practices for the webserver hosting the onion URL
QUANTUM-like attacks for Landing page THREAT123 accepted 6 medium 6 medium
User web traffic to SecureDrop landing page is logged THREAT60 inform 8 high 4 medium No logging on landing page
User web traffic to SecureDrop landing page is uses CDN and may be logged THREAT61 inform 8 high 4 medium Use of CDNs discouraged for landing page (not really a reasonable ask, we use CDNs on securedrop.org)
Landing page is unavailable THREAT62 out of scope 2 low 2 low
Landing page is framed THREAT63 inform 2 low 1 low Landing page: always append X-Frame-Options: DENY

Scenarios Using This Component

Back to Components List | Back to Summary