3 ms·
You could encrypt datagrams.
by misframer 12y ago
You could encrypt datagrams.
- gingerlime 12y agoencryption != authentication. Even if you encrypt the datagrams, what stops someone from replaying them? and there are other attack vectors. You probably want to use something like HMAC in this case. But it all depends on your risk profile and environment. I just highlighted one potential attack vector that I didn't see being addressed explicitly, and which might have implications. If the tool explicitly provided message authentication for the UDP datagrams, I would probably not have made the same comment. I think the security fundamentals were missing, let alone more advanced layers of protection.