Re: [v6ops] new draft: draft-taylor-v6ops-fragdrop

[David Farmer <[e-mail]>]

On 10/16/12 13:42 CDT, Templin, Fred L wrote:
>
> Why not just let non-initial fragments through and then forward
> or don't forward the initial fragment depending on whether it
> contains enough information in tlv headers to permit a filtering
> decision?
>

There are fundamental differences in the security threat models between 
a bank and a prison.

If what you are trying to do is prevent information leakage, things 
getting out, then the non-initial fragments could have valuable 
information that you don't want leaking, even if it is incomplete 
information.

Yes, encryption can deal with this issue, but were dealing with the same 
mentality that says you have to decrypt everything crossing the 
parameter to inspect everything going out or coming in.

In most situations I believe this is invalid reasoning, however I cannot 
say it is invalid in all situations.  I also believe the reasoning is in 
far more common use than the situations that actually justify it.

-- 
===============================================
David Farmer               Email:[e-mail]
Office of Information Technology
University of Minnesota	
2218 University Ave SE	    Phone: [phone]
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================