nanog mailing list archives

Re: BGP over TLS


From: Tony Finch <dot () dotat at>
Date: Mon, 21 Oct 2019 18:04:25 +0100

Joe Abley <jabley () hopcount ca> wrote:

Well, TLS exists within a TCP session, and that TCP session could
incorporate the MD5 signature option. I guess.

AIUI this might be useful to make it a bit harder to kill the TCP session,
tho I think modern TCPs are less vulnerable to off-path RST injection
than TCPs were when TCP-MD5 was introduced

Tony.
-- 
f.anthony.n.finch  <dot () dotat at>  http://dotat.at/
German Bight, Humber, Thames: Cyclonic, mainly northeast, becoming west later,
3 to 5, occasionally 6 at first. Slight or moderate. Occasional rain. Good,
occasionally poor.


Current thread: