Messages in this thread | | | Subject | Re: TCP-RST Vulnerability - Doubt | From | Florian Weimer <> | Date | Tue, 29 Jun 2004 23:27:00 +0200 |
| |
* Lincoln Dale:
> the vulnerabilities are real for any application/protocol which makes > use of long-duration TCP sessions.
... *and* which hasn't got fast recovery from connection loss.
For example, NNTP uses long-lived TCP connections, but it is NOT vulnerable because restart is very cheap.
Given the other benefits of fast recovery, it's better to concentrate on that than to tack something on the TCP stack which only solves a tiny subset of the problems (which isn't even relevant in practice). - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |