[tcpm] I-D Action: draft-ietf-tcpm-tcp-ghost-acks-06.txt

[[e-mail]]

Internet-Draft draft-ietf-tcpm-tcp-ghost-acks-06.txt is now available. It is a
work item of the TCP Maintenance and Minor Extensions (TCPM) WG of the IETF.

   Title:   Improve TCP Handling of Out-of-Window Packets to Mitigate Ghost ACKs
   Authors: Yepeng Pan
            Christian Rossow
   Name:    draft-ietf-tcpm-tcp-ghost-acks-06.txt
   Pages:   6
   Dates:   2026-06-11

Abstract:

   Historically, TCP as specified in RFC 793 was threatened by the blind
   data injection attack because of the loose SEG.ACK value validation,
   where the SEG.ACK value of a TCP segment is considered valid as long
   as it does not acknowledge data ahead of what has been sent.  RFC
   5961 improved the input validation by shrinking the range of
   acceptable SEG.ACK values in a TCP segment.  Later, RFC 9293
   incorporated the updates proposed by RFC 5961 as a TCP stack
   implementation option.
   However, an endpoint that follows the RFC 9293 specifications can
   still accept a TCP segment containing an SEG.ACK value acknowledging
   data that the endpoint has never sent.  This document specifies small
   modifications to the way TCP verifies incoming TCP segments' SEG.ACK
   value to prevent TCP from accepting such invalid SEG.ACK values.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-tcpm-tcp-ghost-acks/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-tcpm-tcp-ghost-acks-06.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-tcpm-tcp-ghost-acks-06

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts