RE: ISCSI: Urgent Flag requirement violates TCP.

[Black_David@emc.com]

> In the same manner an urgent pointer would be useful to an analyzer, it
> would also be useful to a snooper in that this mechanism can be seen to
> weaken security.  Yet another reason to make this an optional feature.  As
> an analyzer would need to be fully in the path to see switched packets, an
> analyzer should be able to remain synchronous with the stream.

With my co-chair hat off.  This is not a useful security property - can we
avoid sending discussion down this rathole, please?  Assuming that an
adversary does not understand the information s/he has obtained is
usually a mistake in a security analysis.

--David

---------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 42 South St., Hopkinton, MA  01748
+1 (508) 435-1000 x75140     FAX: +1 (508) 497-8500
black_david@emc.com       Mobile: +1 (978) 394-7754
---------------------------------------------------