Re: [tcpm] [OPSEC] draft-gont-tcp-security

Todd Glassey <tglassey@earthlink.net> Tue, 14 April 2009 19:22 UTC

Return-Path: <tglassey@earthlink.net>
X-Original-To: tcpm@core3.amsl.com
Delivered-To: tcpm@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CF05A28C1B9; Tue, 14 Apr 2009 12:22:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.449
X-Spam-Level:
X-Spam-Status: No, score=-1.449 tagged_above=-999 required=5 tests=[AWL=-1.150, BAYES_00=-2.599, MANGLED_LIST=2.3]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8FsyJ-vuMFak; Tue, 14 Apr 2009 12:22:37 -0700 (PDT)
Received: from elasmtp-spurfowl.atl.sa.earthlink.net (elasmtp-spurfowl.atl.sa.earthlink.net [209.86.89.66]) by core3.amsl.com (Postfix) with ESMTP id D21FB28C1B5; Tue, 14 Apr 2009 12:22:36 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk20050327; d=earthlink.net; b=ELMvYCbh+jvv0ubaw5sa+uuFZtDbE65BIFf6OzXhtS2DTBhp08l5OANDhMZ8PUYj; h=Received:Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:References:In-Reply-To:Content-Type:Content-Transfer-Encoding:X-ELNK-Trace:X-Originating-IP;
Received: from [38.104.134.74] (helo=[192.168.1.138]) by elasmtp-spurfowl.atl.sa.earthlink.net with esmtpa (Exim 4.67) (envelope-from <tglassey@earthlink.net>) id 1LtoCm-0005aN-1E; Tue, 14 Apr 2009 15:22:00 -0400
Message-ID: <49E4E233.9040609@earthlink.net>
Date: Tue, 14 Apr 2009 12:21:23 -0700
From: Todd Glassey <tglassey@earthlink.net>
User-Agent: Thunderbird 2.0.0.21 (Windows/20090302)
MIME-Version: 1.0
To: Fernando Gont <fernando@gont.com.ar>
References: <C304DB494AC0C04C87C6A6E2FF5603DB221318F5E8@NDJSSCC01.ndc.nasa.g ov><49E36AB9.40507@isi.edu> <49E384E9.1050106@gont.com.ar><49E3878C.9080200@isi.edu> <49E39119.1060902@gont.com.ar> <B01905DA0C7CDC478F42870679DF0F1004BC4176D0@qtdenexmbm24.AD.QINTRA.COM> <49E3A88F.9060301@gont.com.ar> <49E3ABC0.1050601@isi.edu> <49E3B9BF.1060901@gont.com.ar> <49E3BED9.1030701@isi.edu> <C9E987CC-0213-4C67-BA0A-11C736772EE7@nokia.com> <49E4D257.40504@gont.com.ar>
In-Reply-To: <49E4D257.40504@gont.com.ar>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-ELNK-Trace: 01b7a7e171bdf5911aa676d7e74259b7b3291a7d08dfec79bd0f68e3a5c852fb565124da4159354c350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 38.104.134.74
X-Mailman-Approved-At: Wed, 15 Apr 2009 08:02:13 -0700
Cc: "'tcpm@ietf.org'" <tcpm@ietf.org>, "'ietf@ietf.org'" <ietf@ietf.org>, Joe Touch <touch@ISI.EDU>, "Smith, Donald" <Donald.Smith@qwest.com>, 'Joe Abley' <jabley@ca.afilias.info>, "'opsec@ietf.org'" <opsec@ietf.org>
Subject: Re: [tcpm] [OPSEC] draft-gont-tcp-security
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <tcpm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tcpm>
List-Post: <mailto:tcpm@ietf.org>
List-Help: <mailto:tcpm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Apr 2009 19:22:37 -0000

Fernando Gont wrote:
> Lars Eggert wrote:
>
>   
>> I agree with Joe that some of the hardening techniques that vendors are
>> implementing come with consequences (make TCP more brittle). To me, this
>> is a *reason* this document should be published via the IETF (i.e.,
>> TCPM) - we are probably in the best position to correctly evaluate and
>> classify the impact of various hardening techniques. Stack vendors have
>> been putting these mechanisms in to their stacks without clear
>> specifications and discussions of the potential upsides and downsides
>> that would let them make an educated decision. It seems clear to me that
>> the vendor community is looking for guidance here, and I do believe the
>> IETF should give it.
>>     
>
> This is the reason for which the output of the CPNI project was
> submitted as an IETF I-D.
>   
Yeah - so then this would be tested across all of the local TCP 
implementations including the MS, AT&T *(i.e. Lachman Associates Inc) 
and possibly Mentat's fast system?
> Kind regards,
>   
> ------------------------------------------------------------------------
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com 
> Version: 8.0.238 / Virus Database: 270.11.57/2059 - Release Date: 04/14/09 14:52:00
>
>