RE: RE: Shipworm

"Christian Huitema" <[email protected]> Thu, 3 Oct 2002 10:35:55 -0700
Newsgroups gmane.ietf.ngtrans
Message-ID <F66A04C29AD9034A8205949AD0C9010403270BD0@win-msg-02.wingroup.windeploy.ntdev.microsoft.com>
> > 5) The current task of relays is very similar to resolving an ARP
> > request for a client; this is something that relays do easily.
> 
> security folk consider arp one of the most horrifying holes.

My reference to ARP related to the two phase approach, also implemented
in neighbor discovery: first "resolve" the destination address; then,
once resolution is complete, forward the packets. Teredo does not
actually use the ARP protocol, and does not share the ARP security
issues.

-- Christian Huitema