netdev - Re: [PATCH -next 0/2] net: allow setting ecn via routing table

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <20141030.234913.314319804895249709.davem@davemloft.net>
Date:	Thu, 30 Oct 2014 23:49:13 -0400 (EDT)
From:	David Miller <davem@...emloft.net>
To:	eric.dumazet@...il.com
Cc:	fw@...len.de, netdev@...r.kernel.org
Subject: Re: [PATCH -next 0/2] net: allow setting ecn via routing table

From: Eric Dumazet <eric.dumazet@...il.com>
Date: Thu, 30 Oct 2014 16:30:01 -0700

> On Fri, 2014-10-31 at 00:16 +0100, Florian Westphal wrote:
> 
>> I see. So that makes ecn=1 default a pure fantasy.
> 
> Well, I had this dream about 2 or 3 years ago, but I eventually came to
> this (sad) conclusion.

We really should have done this from the beginning, but I guess we
lacked the courage to do so.

Some security nuts will say that the ECN bits are some covert channel
of communication and block connections based upon that, instead of,
you know, just clearing the bits.

Ok ok, Florian please resubmit your original patches.  We'll go with a
boolean per-route override.  Thanks for taking the time to discuss
this with us.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html