[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Future ISAKMP Denial of Service Vulnerablity Needs Addressing
>>>>> "Chris" == Chris Trobridge <CTrobridge@baltimore.com> writes:
Chris> It won't help if we all start using IPSEC in place of SSL to talk to web
Chris> servers (is this ever likely?), but it would help with VPNs.
But, please note that HTTPS currently has no protection against denial
of service attacks. Even ISAKMP as it is now, before TCP would provide a huge
increase in resistance against DOS.
:!mcr!: | Solidum Systems Corporation, http://www.solidum.com
Michael Richardson |For a better connected world,where data flows faster<tm>
Personal: http://www.sandelman.ottawa.on.ca/People/Michael_Richardson/Bio.html
mailto:mcr@sandelman.ottawa.on.ca mailto:mcr@solidum.com
References: