RE: RE: Shipworm
"Christian Huitema" <[email protected]> Thu, 3 Oct 2002 10:35:55 -0700
| Newsgroups | gmane.ietf.ngtrans |
|---|---|
| Message-ID | <F66A04C29AD9034A8205949AD0C9010403270BD0@win-msg-02.wingroup.windeploy.ntdev.microsoft.com> |
> > 5) The current task of relays is very similar to resolving an ARP > > request for a client; this is something that relays do easily. > > security folk consider arp one of the most horrifying holes. My reference to ARP related to the two phase approach, also implemented in neighbor discovery: first "resolve" the destination address; then, once resolution is complete, forward the packets. Teredo does not actually use the ARP protocol, and does not share the ARP security issues. -- Christian Huitema