3 ms·
IPv4 and v6 run on the honor system too, in that the sender can supply any source address they like. TCP connection setup is the lowest layer that makes it non
by tlb 7y ago
IPv4 and v6 run on the honor system too, in that the sender can supply any source address they like.
TCP connection setup is the lowest layer that makes it nontrivial to spoof a sender.
- Groxx 7y agoThe ability to do this is effectively what enables DNS traffic amplification attacks (and others). Trust has been broadly effective, but also quite damaging at times. It's part of why I'm glad https is nigh universal - http's trust allowed stuff like Firesheep and all the hotel shit-injection that used to be so prevalent.