IETF Logo Mail Archive

Re: [radext] WGLC #2 for draft-ietf-radext-dtls-04

Sam Hartman <hartmans@painless-security.com> Fri, 05 April 2013 00:35 UTC

Return-Path: <hartmans@painless-security.com>
X-Original-To: radext@ietfa.amsl.com
Delivered-To: radext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8642E21F8F08 for <radext@ietfa.amsl.com>; Thu, 4 Apr 2013 17:35:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6u3AbSlpFehg for <radext@ietfa.amsl.com>; Thu, 4 Apr 2013 17:35:46 -0700 (PDT)
Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id C9E4F21F8E6C for <radext@ietf.org>; Thu, 4 Apr 2013 17:35:46 -0700 (PDT)
Received: from carter-zimmerman.suchdamage.org (c-98-216-0-82.hsd1.ma.comcast.net [98.216.0.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 6052F20144; Thu, 4 Apr 2013 20:34:31 -0400 (EDT)
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 6E25E4497; Thu, 4 Apr 2013 20:35:45 -0400 (EDT)
From: Sam Hartman <hartmans@painless-security.com>
To: Jim Schaad <ietf@augustcellars.com>
References: <1A5FDF7C-9E93-447E-A103-9700349CB2F5@gmail.com> <015401ce317b$4f1ad4e0$ed507ea0$@augustcellars.com> <515DF567.3010504@deployingradius.com> <017f01ce3194$d4c25730$7e470590$@augustcellars.com>
Date: Thu, 04 Apr 2013 20:35:45 -0400
In-Reply-To: <017f01ce3194$d4c25730$7e470590$@augustcellars.com> (Jim Schaad's message of "Thu, 4 Apr 2013 17:30:52 -0700")
Message-ID: <tsltxnlolum.fsf@mit.edu>
User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Cc: radext@ietf.org, 'Alan DeKok' <aland@deployingradius.com>
Subject: Re: [radext] WGLC #2 for draft-ietf-radext-dtls-04
X-BeenThere: radext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: RADIUS EXTensions working group discussion list <radext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/radext>, <mailto:radext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/radext>
List-Post: <mailto:radext@ietf.org>
List-Help: <mailto:radext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/radext>, <mailto:radext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Apr 2013 00:35:47 -0000

Consider what happens when you enable support for DTLS between client a
and server b  while both are running and exchanging packets.
Alan wants to permit  packets sent with UDP to be answered  with UDP.

This situation seems to only come up in live upgrades.

v2.39.1 | Report a Bug | By Email | System Status