You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I think the point being made in the spec is to keep PSP simple (and easy to implemented in hardware), thereby relying on the layers above to handle other security concerns. It's not just TCP... the idea is any protocol could be wrapped with PSP. Outside of TCP, I suspect there will probably be traction with RoCE and/or some kind of lightweight socket-based alternative to QUIC.
The specification claims that TCP with ISN randomization and PAWS provides good replay protection, but gives no proof.
The text was updated successfully, but these errors were encountered: