Subject: RE: [Tsvwg] AD review of: draft-ietf-sigtran-sctp-mib-07.txt

From: "Javier Pastor-Balbas (ECE)" <[email-masked]>
Date: Tue, 8 Oct 2002 08:07:06 +0200

Thanks guys, 

We'll change it to AssociationID.

Cheers // Javier.

> -----Original Message-----
> From: Randall Stewart [mailto:[email-masked]]
> Sent: Friday, October 04, 2002 6:21 PM
> To: La Monte Henry Piggy Yarroll
> Cc: Javier Pastor-Balbas (ECE); 'Wijnen, Bert (Bert)'; [email-masked];
> Shawn Routhier (E-mail)
> Subject: Re: [Tsvwg] AD review of: draft-ietf-sigtran-sctp-mib-07.txt
> 
> 
> La Monte:
> 
> Great catch... you are 100% correct... you very well could
> have V-Tags that are the same.. yours and when you consider
> the peers... peer-a may choose the same tag as peer-b..
> 
> In fact  the local implementation can .. in theory choose the
> same tag on different endpoints ..
> 
> R
> 
> La Monte Henry Piggy Yarroll wrote:
> > Sorry for the delayed response, but I just noticed a brief but
> > potentially critical issue.
> > 
> > On Mon, 2 Sep 2002 18:48:42 +0200 , "Javier Pastor-Balbas 
> (ECE)" <javier.pastor
> > [email-masked]> wrote:
> > 
> >>Hi Bert, 
> >>
> >>Please, see my comments inline...
> >>
> >>
> >>>-----Original Message-----
> >>>From: Wijnen, Bert (Bert) [mailto:[email-masked]]
> >>>Sent: Monday, August 26, 2002 5:45 PM
> >>>To: [email-masked]
> >>>Cc: Shawn Routhier (E-mail); Bert Wijnen (E-mail)
> >>>Subject: [Tsvwg] AD review of: draft-ietf-sigtran-sctp-mib-07.txt
> >>
> > ...
> > 
> >>>  By the way, what is "Initiate Verification Tag" ??
> >>>  Probably known to SCTPers, but not to me... Maybe add a 
> >>>  REFERENCE clause to where it is defined.
> >>
> >>Initiate Verification Tag is a unique value that could identify
> >>every assotiation univocally. We'll include the reference. 
> > 
> > 
> > I thought we ironed this out by the 2nd Bakeoff.  The 
> Verification Tag
> > IS NOT a unique value that could identify every association
> > unequivocally.  It is STATISTICALLY unique, but NOT 
> guaranteed unique.
> > It is a security mechanism to prevent blind connection 
> hijacking, not
> > a mechanism for identifying associations.
> > 
> > The API draft introduces the concept of a 32 bit 
> Association ID which
> > IS unique to an association on a given host.
> > 
> > If the MIB assumes that the Verification Tag is a unique identifier,
> > that is a serious flaw.
> > _______________________________________________
> > tsvwg mailing list
> > [email-masked]
> > https://www1.ietf.org/mailman/listinfo/tsvwg
> > 
> > 
> 
> 
> 
> -- 
> Randall R. Stewart
> [email-masked] 815-342-5222 (cell phone)
> 
_______________________________________________
tsvwg mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tsvwg