Re: [tcpm] Some comments on tcpsecure

Fernando Gont wrote:
> Folks,
> 
> I have not yet reviewed the entire document (but will do). However, 
> reading the security considerations section (and at the risk of 
> sounding our own horn?), I see this document does not reference two 
> closely related wg documents of the tcpm and tsvwg working groups.
> 
> The first one is the ICMP attacks draft 
> (draft-ietf-tcpm-icmp-attacks). While tcpsecure mentions the security 
> implications of ICMP on TCP conenctions, it does not reference the 
> I-D. IIRC, this had already been pointed out by Joe (?). As far as 
> the specifications are concerned, you shouldn't bother to fix 
> TCP-based reset attacks if you don't fix the the ICMP-based ones.

Agreed; should this doc recommend filtering out ICMPs as a result? 
(there's no in-window checks that are meaningful, since ICMPs are not 
guaranteed to be timely) I.e., something stronger than "there's nothing 
we can do", which is what is implied in the current security considerations.

> The other doc is the port randomization draft 
> (draft-tsvwg-port-randomization). 

Also ISN randomization (RFC-1948), for similar reasons. Even though some 
of the RST attacks span the entire window, knowing the ISN can help 
during the initial handshake and shortly thereafter.

Joe

Re: [tcpm] Some comments on tcpsecure

Attachment: signature.asc