randy/draft-l3nd
1
0
Fork 0
Code Issues 3 Pull requests Projects Releases Packages Wiki Activity Actions

tls 1.1 or greater

Browse source
This commit is contained in:
Randy Bush 2022-02-18 03:17:15 -08:00
parent 2b8c305273
commit 8a8ddce92d
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
draft-ymbk-idr-l3nd.xml
View file

@ -1126,6 +1126,8 @@ Flags (bit):
<section anchor="security" title="Security Considerations">
<t>TLS version 1.1 or later MUST be used.</t>
<t>The protocol as is MUST NOT be used outside a datacenter or
similarly closed environment without using TLS encapsulation which
is based on a configured CA trust anchor.</t>
@ -1146,8 +1148,9 @@ Flags (bit):
<t>Similarly, malicious nodes/devices could mis-announce
addressing.</t>
<t>If OPENs are not using validated TLS, an attacker could forge an
OPEN for an existing session and cause the session to be reset.</t>
<t>If OPEN PDUs are not over validated TLS, an attacker could forge
an OPEN for an existing session and cause the session to be
reset.</t>
</section>