bugtraq - Re: NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 11 May 2004 16:50:59 -0600
From: Bob Beck <beck@...h.cns.ualberta.ca>
To: Florian Weimer <fw@...eb.enyo.de>
Cc: David Ahmad <da@...urityfocus.com>, bugtraq@...urityfocus.com
Subject: Re: NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP


> > http://www.ietf.org/internet-drafts/draft-ietf-tcpm-tcpsecure-00.txt
> 
> In the meantime, the IETF has disclosed the following IPR statement
> from Cisco:
> 
> <http://www.ietf.org/ietf/IPR/cisco-ipr-draft-ietf-tcpm-tcpsecure.txt>

	Translation - BOHICA, Cisco doesn't want people writing compatible
free network stacks, they want to patent TCP. RAND basically means no
free software, you must license on some terms. So we end up with
stupid situations like we did with VRRP (see
http://www.openbsd.org/lyrics.html for that sordid tale), and the IETF
will roll over and piddle on itself insted of standing up to this
nonsense like W3C does.  This is nasty. 

	-Bob