Re: [secdir] draft-ietf-tcpm-tcpsecure

[Nicolas Williams <[e-mail]>]

The mitigations in this I-D are made SHOULD, SHOULD, and MAY (see
section 6, page 15).  But that means that a TCP implementation could
claim conformance while not implementing any of these mitigations.
Therefore they should be, IMO, MUST, MUST and MAY (or SHOULD).

Also, ISTM that the corner case described in section 4.2 can be avoided
by noting the retransmitted SYN and then sending a SYN+ACK to that, and
if an acknowledgement comes back then reset the old connection (and if
there's no listener to accept the new one, then reset it too).

Nico
--