Re: transaction security in the last mile

[Tony Finch <dot@dotat.at>]

On Sun, 20 Jul 2008, Ben Laurie wrote:
>
> So, I asked Eric Rescorla about this (copied) and he responds that:
>
> a) The ICMP unreachable message includes 64 _bits_ of the payload, according
> to RFC 792, not 64 bytes, so only the UDP header is covered, and so all UDP
> protocols have this issue.

It's the IP header (20 bytes) plus 64 bits (8 bytes) of the IP payload,
which is just enough to cover the whole UDP header, or the port numbers
and sequence number from the TCP header.

RFC 4884 allows the amount of payload to be greater than this minimum.

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
FISHER: NORTH OR NORTHWEST 5 TO 7. ROUGH OR VERY ROUGH DECREASING MODERATE OR
ROUGH. SHOWERS. MODERATE OR GOOD.

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>