Re: Why TCP is more secure than UDP?

[Leszek Jakubowski <leszek.jakubowski () gmail com>]

paavan.shah () gmail com wrote:
> It is said that UDP is considered more vulnerable to spoofing than TCP?
>
>
> Can anyone point me to any document/link which describes TCP is more secure than UDP
Well the RFCs for starters. With TCP each side has to receive at least
one packet during the handshake. In UDP you can send data without having
to receive any, so there's no need to setup a route back to you (you can
blind spoof). Also there is no sequence numbers because in UDP there is
no connection (you just send chunks of data) so injecting data into a
conversation is based on the first-the best rule. However most ISPs
filter out (or don't they?) UDP packets with source addresses that are
not theirs.

-- 
Leszek Jakubowski