RE: IPS-All: Reminder - Security draft last call ends Monday, July 1 at 8am EST

[Jonathan Trostle <jtrostle@corp.iready.com>]

Title: RE: IPS-All: Reminder - Security draft last call ends Monday, July 1 at 8am EST

Hi,

One comment/question on the security draft below:

p. 23: "Where iSNS is used without security, IP block storage protocol
implementations MUST support a negative cache for authentication
failures."

Is it worth pointing out that when iSNS is used with security, then a negative cache MUST NOT be used? An attacker can cause authentication to fail through a DoS attack which could result in an entry being added to the negative cache.

Jonathan

-----Original Message-----
From: Elizabeth Rodriguez [mailto:elizabeth.g.rodriguez@123mail.net]
Sent: Thursday, June 27, 2002 2:41 PM
To: ips@ece.cmu.edu
Cc: Elizabeth.G.Rodriguez@123mail.net
Subject: IPS-All: Reminder - Security draft last call ends Monday, July
1 at 8am EST

Just a reminder to all to get your last call comments on the security draft in.
The cutoff is Monday July 1 at 8am EST
 
Thanks,
 
Elizabeth