Re: [apps-discuss] AD Fail - MPTCP API

[Ned Freed <[e-mail]>]

I noted this text:

   As this address may not be valid any more if the first subflow is
   closed, the MPTCP stack MAY close the whole MPTCP connection if the
   first subflow is closed (i.e. fate sharing between the initial
   subflow and the MPTCP connection as a whole).  Whether to close the
   whole MPTCP connection by default SHOULD be controlled by a local
   policy.  Further experiments are needed to investigate its
   implications.

Presumably this "local policy" would be set system-wide? If so, that's a poor
choice. Such choices need to be able to be made at a finer granularity than
this, because in many cases not all connections a system handles have the same
security considerations.

The lack of user control for things like this has rendered other protocols
a lot less useful than they might otherwise have been. 

				Ned