Re: [Taps] Some comments on draft-ietf-taps-impl-12

[Fernando Gont <[e-mail]>]

Hi, Gorry,

Thanks for all your responses! In-line....

On 5/8/22 12:00, Gorry Fairhurst wrote:
>>
>> Section 4.7.2.:
>>> On platforms with facilities to create a "virtual connection" for
>>> connectionless protocols implementations should use these mechanisms
>>> to minimise the handling of datagrams intended for already created
>>> Connection objects.
>>
>> I don't necessarily disagree, but you should probably elaborate here 
>> -- e.g., on one hand, "stateless" is good in the sense that you don't 
>> tie system resources unnecessarily. However, it's also more prone to 
>> spoofing, to the extent that an attacker might require "a lot of work" 
>> from a server without even proving that it can receive the return 
>> packets.
> 
> I'm not quite sure what you are asking here. What I think was intended 
> was very similar to the way UDP sockets in BSD can be used with 
> "connect", is there something else you were expecting to see in the text?

Looks like I got confused -- my bad, sorry! -- No changes expected here.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: [e-mail]
PGP Fingerprint: F242 FF0E A804 AF81 EB10 2F07 7CA1 321D 663B B494