bugtraq - Request for feedback on TCP security (IETF effort)

Open Source and information security mailing list archives

Date: Sat, 20 Feb 2010 02:20:21 -0300
From: Fernando Gont <fernando.gont@...il.com>
To: bugtraq@...urityfocus.com
Subject: Request for feedback on TCP security (IETF effort)

Hello, folks,

I've just posted a revision of the "Security Assessment of the
Transmision Control Protocol (TCP)" IETF Internet-Draft. It's
available at the usual places (including:
http://tools.ietf.org/id/draft-ietf-tcpm-tcp-security-01.txt). (It is
a derivative of the CPNI TCP-security document published last year,
available at: http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf)

The current plan is discuss each section of the draft piecemeal (it is
a very large document), get consensus on the changes to apply to the
existing text, and then move on to the next section.

Therefore I'm requesting feedback on all the sections through Section
3.1.2.3. -- this includes the introduction sections, the basic
check on the TCP segment size (Section 3) and the discussion of port
numbers (Section 3.1 with all its subsections).

Please submit comments by Friday March 5th, 2010, so that we can move
on to the next sections in a timely manner.

P.S.: It would be best if you subscribe the TCP WG mailing-list at:
https://www.ietf.org/mailman/listinfo/tcpm . Nevertheless, you can
post your feeback here (please CC me), or send it unicast to
fernando@...t.com.ar , if you prefer.

Thanks!

Kind regards,
-- 
Fernando Gont
e-mail: fernando@...t.com.ar || fgont@....org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives