[dtn-security] Re(2): Re(2): How do you feel about Bonjour/Avahi?

Peter Lovell <plovell@mac.com> Mon, 13 July 2009 13:47 UTC

MIME-version: 1.0
Content-transfer-encoding: 7bit
Content-type: text/plain; charset="US-ASCII"
From: Peter Lovell <plovell@mac.com>
To: "Graham Keellings (Leonix Solutions Pte Ltd)" <Graham@LeonixSolutions.com>
Date: Mon, 13 Jul 2009 09:46:02 -0400
Message-id: <20090713134603.958934311@smtp.mac.com>
In-reply-to: <4A5AA83C.7030400@LeonixSolutions.com>
References: <89E48AE60E64EF4E8EB32B0B7EC74920A1B0F5@EVS-EC1-NODE2.surrey.ac.uk> <"3A5AA67A8B120B48825BFFCF544385613 7E0B06196"@NDJSSCC03.ndc.nasa.gov> <4A1DD73F.50000@bbn.com> <023601c9df2a$694fd5b0$3bef8110$@com> <4A2DF7FD.5020104@LeonixSolutions.com> <3A5AA67A8B120B48825BFFCF5443856137E3553C4B@NDJSSCC03.ndc.nasa.gov> <"029d01c 9e925$1e354880$5a9fd980$"@com> <4A46C257.3040006@LeonixSolutions.com> <"2009062 8050243.1566215671"@smtp.mac.com> <4A46FBB2.3080205@LeonixSolutions.com> <"2009 0628052255.640550503"@smtp.mac.com> <4A470CD7.4010502@LeonixSolutions.com> <"20 090628141313.1532044204"@smtp.mac.com> <4A4878A6.7010707@LeonixSolutions.com> <20090629123400.1726285002@smtp.mac.com> <C304DB494AC0C04C87C6A6E2FF5603DB2217B29183@NDJSSCC01.ndc.nasa.gov> <4A497B04.3070909@LeonixSolutions.com> <20090630122842.1049441707@smtp.mac.com> <4A556063.2010305@LeonixSolutions.com> <20090709041417.302976474@smtp.mac.com> <4A56E1CA.7080000@LeonixSolutions.com> <20090710120958.2016629300@smtp.mac.com> <4A5AA83C.7030400@LeonixSolutions.com>
Cc: dtn-security@maillists.intel-research.net
Subject: [dtn-security] Re(2): Re(2): How do you feel about Bonjour/Avahi?
Precedence: list

On Mon, Jul 13, 2009, Graham Keellings (Leonix Solutions Pte Ltd)
<Graham@LeonixSolutions.com> wrote:

>What about this then - is it even feasible? If I know that I have a 
>closed universe of nodes, can I encrypt the IP headers? That might help 
>prevent  DOS by repeated pinging.   <snip>
>
>Am I on a totally wrong track here? Or could encrypted IP headers be one 
>more layer of armour?
>

I guess this could work for an isolated system, but those are of limited
interest. Most systems have some interaction with the outside even
though the community may be a closed one.

When faced with a DOS attack, the challenge is to get rid of as many
packets as possible with the absolute least effort. the question is --
would encrypting the IP headers help or hinder this ??

Regards.....Peter

[dtn-security] Re(2): [dtn-interest] Bundle Secur… Peter Lovell
Re: [dtn-security] [dtn-interest] Bundle Security… Hans Kruse
[dtn-security] Bundle Security Protocol Implement… M.Bhutta
Re: [dtn-security] Newbie seeking some security r… Armando Caro
Re: [dtn-security] Newbie seeking some security r… Ivancic, William D. (GRC-RHN0)
Re: [dtn-security] Newbie seeking some security r… Graham Keellings (Leonix Solutions Pte Ltd)
Re: [dtn-security] Newbie seeking some security r… Jason Redi
Re: [dtn-security] Newbie seeking some security r… Armando Caro
Re: [dtn-security] Newbie seeking some security r… Kristian Erik Hermansen
Re: [dtn-security] Newbie seeking some security r… Ivancic, William D. (GRC-RHN0)
Re: [dtn-security] Newbie seeking some security r… Stephen Farrell
Re: [dtn-security] Newbie seeking some security r… Graham Keellings (Leonix Solutions Pte Ltd)
Re: [dtn-security] Newbie seeking some security r… Kristian Erik Hermansen
[dtn-security] Newbie seeking some security relat… Graham Keellings (Leonix Solutions Pte Ltd)
[dtn-security] Re(many): Is there a "secure" refe… Peter Lovell
Re: [dtn-security] Re(2): Re(2): Is there a "secu… Graham Keellings (Leonix Solutions Pte Ltd)
Re: [dtn-security] Is there a "secure" reference … Peter Lovell
[dtn-security] Re(2): Re(2): Re(2): Is there a "s… Peter Lovell
[dtn-security] Re(2): Re(2): Is there a "secure" … Peter Lovell
Re: [dtn-security] Re(2): Is there a "secure" ref… Graham Keellings (Leonix Solutions Pte Ltd)
[dtn-security] Re(2): Is there a "secure" referen… Peter Lovell
Re: [dtn-security] Is there a "secure" reference … Graham Keellings (Leonix Solutions Pte Ltd)
[dtn-security] Re(2): Is there a "secure" referen… Peter Lovell
Re: [dtn-security] Is there a "secure" reference … Graham Keellings (Leonix Solutions Pte Ltd)
[dtn-security] Is there a "secure" reference impl… Graham Keellings (Leonix Solutions Pte Ltd)
[dtn-security] Re(2): Newbie seeking some securit… Peter Lovell
Re: [dtn-security] Newbie seeking some security r… Jason Redi
Re: [dtn-security] Newbie seeking some security r… Stephen Farrell
Re: [dtn-security] Newbie seeking some security r… Ivancic, William D. (GRC-RHN0)
Re: [dtn-security] Newbie seeking some security r… Graham Keellings (Leonix Solutions Pte Ltd)
Re: [dtn-security] Encrypted IP headers Graham Keellings (Leonix Solutions Pte Ltd)
[dtn-security] Re(2): Encrypted IP headers Peter Lovell
Re: [dtn-security] Encrypted IP headers Graham Keellings (Leonix Solutions Pte Ltd)
[dtn-security] Re(2): Re(2): How do you feel abou… Peter Lovell
Re: [dtn-security] Re(2): How do you feel about B… Graham Keellings (Leonix Solutions Pte Ltd)
Re: [dtn-security] Re(2): Re(2): Re(2): Is there … Ivancic, William D. (GRC-RHN0)
[dtn-security] Re(2): Re(2): Re(2): Is there a "s… Peter Lovell
[dtn-security] Re(2): How do you feel about Bonjo… Peter Lovell
Re: [dtn-security] How do you feel about Bonjour/… Graham Keellings (Leonix Solutions Pte Ltd)
Re: [dtn-security] How do you feel about Bonjour/… Graham Keellings (Leonix Solutions Pte Ltd)
Re: [dtn-security] Re(2): Re(2): Is there a "secu… Graham Keellings (Leonix Solutions Pte Ltd)
Re: [dtn-security] How do you feel about Bonjour/… Peter Lovell
[dtn-security] How do you feel about Bonjour/Avah… Graham Keellings (Leonix Solutions Pte Ltd)