ietf
[Top] [All Lists]

Re: [tcpm] [OPSEC] draft-gont-tcp-security

2009-04-14 14:14:33
Lars Eggert wrote:

I agree with Joe that some of the hardening techniques that vendors are
implementing come with consequences (make TCP more brittle). To me, this
is a *reason* this document should be published via the IETF (i.e.,
TCPM) - we are probably in the best position to correctly evaluate and
classify the impact of various hardening techniques. Stack vendors have
been putting these mechanisms in to their stacks without clear
specifications and discussions of the potential upsides and downsides
that would let them make an educated decision. It seems clear to me that
the vendor community is looking for guidance here, and I do believe the
IETF should give it.

This is the reason for which the output of the CPNI project was
submitted as an IETF I-D.

Kind regards,
-- 
Fernando Gont
e-mail: fernando(_at_)gont(_dot_)com(_dot_)ar || fgont(_at_)acm(_dot_)org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1




_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf