Re: [Netconf] notification access control

[Andy Bierman <andy at netconfcentral.com>]

Andy Bierman wrote:
> Juergen Schoenwaelder wrote:
...
> So, you can easily tell that a session is getting
> a notification (or not), but you cannot guess the content.

I want to summarize that this is not any new security hole,
and pruning payload data or dropping the notification (on one session
but not another), offers an attacker the same opportunity
to identity 'packets of interest' within the capture log.
Without knowing all the filters as well, this is much
less likely to be a real vulnerability.


> > /js
>
> Andy

Andy