TCP MD5 Signature Option
draft-heffernan-tcp-md5-02
| Document | Type |
Replaced Internet-Draft
(individual)
Expired & archived
|
|
|---|---|---|---|
| Author | Andy Heffernan | ||
| Last updated | 1996-10-01 | ||
| Replaced by | draft-ietf-idr-bgp-tcp-md5 | ||
| RFC stream | (None) | ||
| Intended RFC status | (None) | ||
| Formats | |||
| Stream | Stream state | (No stream defined) | |
| Consensus boilerplate | Unknown | ||
| RFC Editor Note | (None) | ||
| IESG | IESG state | Replaced by draft-ietf-idr-bgp-tcp-md5 | |
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:
Abstract
This memo describes a TCP extension to enhance security for selected TCP applications. It defines a new TCP option for carrying an MD5 digest in a TCP segment. This digest acts like a signature for that segment, incorporating information known only to the connection end points. Using this option in the way described in this paper significantly reduces the danger from security attacks on critical TCP applications on the Internet. This document specifies an experimental protocol for use in the Internet.
Authors
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)