Re: [multipathtcp] High-level design decisions /architecture

[Joe Touch <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



William Herrin wrote:
...
> If we identify the connection by the original IP address even after
> that address is gone, effectively lying to the application, we can
> induce it to incorrect behavior. That can have security implications
> that may be hard to get a handle on.

This is the reason I raised the issue of "as goes the original IP
address, so goes the connection" during the Stockholm meeting.

I can see how to make things work when this is true, basically by
authenticating based on this address pair rather than the address pair
in the packet. If not, as noted above, there's an opportunity for
hijacking (if malicious), or at least unintended behavior (if not).

Joe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAkrvbuAACgkQE5f5cImnZrvgGgCg0qhfw/7eem7uIwnDD25uYCsJ
tzQAn3A0mqarLjV3BMNtL5otuZnFdfpO
=J+kU
-----END PGP SIGNATURE-----