Re: TCP/BGP vulnerability - easier than you think

[Paul Jakma <paul () clubi ie>]

On Wed, 21 Apr 2004, Iljitsch van Beijnum wrote:

> I'm not recommending this for "small" peers as the crypto DoS risk
> is worse than what happens when the attack is executed
> successfully.

Why would MD5 be more of a crypto DoS risk with IPSec AH headers than
with bgp tcp-md5?

regards,
-- 
Paul Jakma      paul () clubi ie        paul () jakma org       Key ID: 64A2FF6A
        warning: do not ever send email to spam () dishone st
Fortune:
"Lead us in a few words of silent prayer."
-- Bill Peterson, former Houston Oiler football coach