[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: ISAKMP: Issues
>What is the argument for trashing the message? Leave it unless there is a
>strong such argument.
It seems to me that if an Key Negotiation protocol that purports to be
providing enhanced security receives a malformed message (i.e. the code on the
other end "got it wrong"), that the prudent thing to do is to refuse the
negotiation under the assumption that the other end probably got other things
wrong too. If you can't figure out the size of the message you're sending,
how are you ever going to parse the proposals? :-)
That's one argument, the other is, perhaps, religious. Without stringent
checking of MBZ and the like in wire protocols, it's that much harder to
extend them in the future.
Derrell
Follow-Ups:
References: