Messages in this thread |  | | Subject | Re: [PATCH] TCP: add option for silent port knocking with integrity protection | From | Eric Dumazet <> | Date | Thu, 12 Dec 2013 07:33:41 -0800 |
| |
On Thu, 2013-12-12 at 16:07 +0100, Christian Grothoff wrote:
> I'm already having fun with IETF and pTLDs right now, one war at a time > ;-). I also figured it might be easier to have a reasonable working > reference implementation first and then standardize. After all, with my > recent draft some people at IETF suggested I should get 1,000,000+ users > first and then ask again.
Honestly, breaking the detection of old packets (PAWS) is not going to fly. Its not even mentioned in your doc.
If a client uses the same ISN for two consecutive connexions to a server, how the server can decide the 2nd SYN is not a duplicate ?
You really need more than 3 pages to fully investigate all the pros/cons of this idea.
|  |