Subject: [midcom] STUN update

From: Melinda Shore <[email-masked]>
Date: Wed, 25 Sep 2002 11:30:22 -0400

FYI - The STUN draft has been scrutinized by security types
in the IESG and IAB, and we've gotten some feedback.  The
main concern is about the DDoS potential, although given the
topological requirements to pull it off, this attack is not
peculiar to STUN.  They've also asked for some
clarifications on two points: 1) how to check the DNS name,
and 2) what is meant by the recommendation that a check be
performed to see whether or not a server is authorized to
provide STUN responses.

Melinda
_______________________________________________
midcom mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/midcom