[e2e] Receiving RST on a MD5 TCP connection.

Mitesh Dalal mdalal at cisco.com
Mon Jun 27 15:38:51 PDT 2005



On Mon, 27 Jun 2005, Tapan Karwa wrote:

> Thanks alot, Mitesh. I think your draft sugggets
> solutions to the attacK part of my question.
>
> I am wondering if there is any consensus on how we
> should deal with the problem mentioned in Section 4.1
> of RFC 2385.
>

AFAIK, there is no common solution for this problem.
Implementations may have their own "solutions"
besides the obvious drop the RST and time out the
connection. But for obvious reasons, accepting the
MD5less RST is not acceptable.

Mitesh


More information about the end2end-interest mailing list