[LACNIC/Seguridad] Security Considerations for Transient Numeric Identifiers Employed in Network Protocols (Fwd: New Version Notification for draft-gont-numeric-ids-sec-considerations-10.txt)

Fernando Gont fgont en si6networks.com
Mar Ene 10 23:09:43 -03 2023


Estimades,

FYI, lo acabamos de revisar: 
https://www.ietf.org/archive/id/draft-gont-numeric-ids-sec-considerations-10.txt

P.S.: Hemos sido testigos de un Messi maradoneano, y de grandes 
"rusticos" como Ota y el Cuti Romero. Beleza.   Y a muerte con la 
escaloneta, y en particular con Dibu Martinez.

Slds,
Fernando
Obispo de la Iglesia Marodoniana




-------- Forwarded Message --------
Subject: New Version Notification for 
draft-gont-numeric-ids-sec-considerations-10.txt
Date: Tue, 10 Jan 2023 17:54:51 -0800
From: internet-drafts en ietf.org
To: Fernando Gont <fgont en si6networks.com>, Ivan Arce <iarce en quarkslab.com>


A new version of I-D, draft-gont-numeric-ids-sec-considerations-10.txt
has been successfully submitted by Fernando Gont and posted to the
IETF repository.

Name:		draft-gont-numeric-ids-sec-considerations
Revision:	10
Title:		Security Considerations for Transient Numeric Identifiers 
Employed in Network Protocols
Document date:	2023-01-10
Group:		Individual Submission
Pages:		11
URL: 
https://www.ietf.org/archive/id/draft-gont-numeric-ids-sec-considerations-10.txt
Status: 
https://datatracker.ietf.org/doc/draft-gont-numeric-ids-sec-considerations/
Htmlized: 
https://datatracker.ietf.org/doc/html/draft-gont-numeric-ids-sec-considerations
Diff: 
https://author-tools.ietf.org/iddiff?url2=draft-gont-numeric-ids-sec-considerations-10

Abstract:
    Poor selection of transient numerical identifiers in protocols such
    as the TCP/IP suite has historically led to a number of attacks on
    implementations, ranging from Denial of Service (DoS) to data
    injection and information leakage that can be exploited by pervasive
    monitoring.  To prevent such flaws in future protocols and
    implementations, this document updates RFC 3552, requiring future
    RFCs to contain a vulnerability assessment of their transient numeric
    identifiers.

 


The IETF Secretariat




Más información sobre la lista de distribución Seguridad