| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 12 Jul 2013 03:41:38 +0200 From: Hannes Frederic Sowa <hannes@...essinduktion.org> To: David Miller <davem@...emloft.net> Cc: netdev@...r.kernel.org Subject: Re: updates to syncookies - timestamps not needed any more (freebsd) On Thu, Jul 11, 2013 at 04:57:26PM -0700, David Miller wrote: > From: Hannes Frederic Sowa <hannes@...essinduktion.org> > Date: Mon, 8 Jul 2013 18:04:21 +0200 > > > Interesting patch by Andre Opperann of FreeBSD: > > <http://lists.freebsd.org/pipermail/freebsd-net/2013-July/035999.html> > > Interesting work, but outside of the change of hash function I'm not so > sure. The whole reason we went to the timestamp field was to eliminate > the coarse tables. > > I understand that he claims that %99.99 of connections are handled by > the values he has chosen, but this is still a step backwards in my > opinion. If I understood this thread[0] correctly, it seems Windows 8 might not enable TCP timestamps by default? I can not verify, I currently have no Windows installations near me. That would mean, linux does, too, fall back to an unscaled window connection as soon as syncookies kick in (but we would not end up with an unsynchronized window scale option). [0] http://thread.gmane.org/gmane.os.freebsd.devel.net/38211/focus=38216 Greetings, Hannes -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists