3 ms·
Please let me know if this has already been posted. Is there any worry that someon might perform a DoS attack against a client by replaying a valid packet from
by eximius 10y ago
Please let me know if this has already been posted.
Is there any worry that someon might perform a DoS attack against a client by replaying a valid packet from the target from different hosts so that the other servers cannot correctly route to the real IP of the target? This is based solely off of the description on the homepage and it might not be possible due to implementation details I'm unaware of.
- zx2c4 10y agoReplay attacks don't work because of the nonce, so that's handled successfully. But an attacker with an active man in the middle position might change the outer (unencrypted) src IP of a packet. However, that src will need to be able to produce authentic replies; otherwise the session will quickly be deemed invalid, so that mitigates any potential very oddball amplification attacks you could dream up. And regardless, an attacker with this kind of active man in the middle can already drop packets at will, so this isn't a vulnerability.