Re: [tsvwg] I-D Action: draft-ietf-tsvwg-udp-options-dplpmtud-02.txt

[[e-mail]]

Hi Joe, all,

Please see inline.

Cheers,
Med

De : Joe Touch <[e-mail]>
Envoyé : jeudi 6 janvier 2022 17:45
À : Black, David <[e-mail]>
Cc : BOUCADAIR Mohamed INNOV/NET <[e-mail]>; Gorry Fairhurst <[e-mail]>; [e-mail]
Objet : Re: [tsvwg] I-D Action: draft-ietf-tsvwg-udp-options-dplpmtud-02.txt




On Jan 6, 2022, at 8:33 AM, Black, David <[e-mail]<mailto:[e-mail]>> wrote:

Joe,

> FWIW, IMO, if you want to expect security, you should use security.
And my opinion differs … and that difference of opinion doesn't matter here.

This is about robustness to potential interference from an off-line entity.

Only if you expect that from a protocol that hasn’t deployed security.  I don’t make that mistake.


What matters is to state the property – values are unpredictable to an external observer

If that is what you want, encrypt.
[Med] You can  … but for off-path attacks, this can be fixed without encryption. That’s the same reason we have the following for ISNs, for example, in draft-ietf-tcpm-rfc793bis:

           The Initial Sequence Number.  The first sequence number used
           on a connection, (either ISS or IRS).  Selected in a way that
           is unique within a given period of time and is unpredictable
           to attackers.

That’s consistent with the reco in rfc3552#section-3.5


   However, designers are expected to give more weight to

   attacks which can be mounted by off-path attackers as well as on-path

   ones.

and also documents such as draft-irtf-pearg-numeric-ids-generation.

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.