3 ms·
TCP's spoof protections are fairly limited and weak. If you are worried about being spoofed, address it at layer-7. I wouldn't let spoofing concerns drive my ch
by cbsmith 12y ago
TCP's spoof protections are fairly limited and weak. If you are worried about being spoofed, address it at layer-7. I wouldn't let spoofing concerns drive my choice of layer-3 protocol.
- gingerlime 12y agoSpoofing a TCP source address is still pretty hard compared to UDP. And security should always be applied in layers, so if your risk profile is such, then relying on source IP protection alone might not be enough.
- cbsmith 12y agoProbably shouldn't use IP then... ;-)
- mobiplayer 12y agoI personally hope you chose IP as a layer-3 protocol. You might want to decide between TCP and UDP for layer-4, though, but as gingerlime pointed out it is stupidly easy to successfully spoof UDP comms, there's not even need to have a MITM situation. Same goes for ICMP.
- cbsmith 12y ago> I personally hope you chose IP as a layer-3 protocol. ROTFL! Whoopsie. ;-) > You might want to decide between TCP and UDP for layer-4, though, but as gingerlime pointed out it is stupidly easy to successfully spoof UDP comms, there's not even need to have a MITM situation. Same goes for ICMP. Yes, but TCP's protections are quite weak. If you are really concerned about spoofing, you are much better off handling that with cryptographic solutions.