3 ms·
How can you avoid in-band attacks? I'm not going to send a postcard to a webserver with metadata about every HTTP request.
by lonelappde 7y ago
How can you avoid in-band attacks? I'm not going to send a postcard to a webserver with metadata about every HTTP request.
- wpietri 7y agoThe phone system switched call routing from in-band signalling (that is, tones you could hear on the wire) to out-of-band signalling (where control information went over separate channels to content). Another approach is reliable encapsulation. Ethernet and TCP/IP, for example, are technically all in one channel. But packet content won't be mistaken for protocol information. You could also look at things like SSH and how it has multiple channels: https://tools.ietf.org/html/rfc4254 https://tools.ietf.org/html/rfc4254 I'm sure there are other approaches, too, and I hope people will mention them.