Subject: RE: [Rserpool] Next version of Rserpool threats for review and comment

From: "Sengodan Senthil (NRC/Boston)" <[email-masked]>
Date: Thu, 6 Sep 2001 09:41:16 -0500

Erik wrote:

> There are several threats:
> 
> 1) thwarting successful discovery
> 
>    This would make it impossible to successfully complete
>    the discovery operation.  This is a DOS attack.
> 
> 2) spoofing successful discovery
>   
>    This would make an unauthorized naming service function server
>    appear to be an authorized one, such that PEs would use it.
>    This malicious naming service would either misrepresent, ignore
>    or otherwise hide or distort information about the PE to subvert
>    RSERPOOL operation.
> 

Aren't these threats already included in the current document:

"3.6 Malicious ENRP Name Resolution"
"3.9a Integrity: ENRP response to name resolution is corrupted during
transmision"
"3.11 ENRP Server Discovery"

- Senthil

_______________________________________________
rserpool mailing list
[email-masked]
http://www1.ietf.org/mailman/listinfo/rserpool