[NSIS] Another "Security Threats for NSIS" Draft Update

["Hannes Tschofenig" <Hannes.Tschofenig at siemens.com>]

hi all, 

while revisiting the comments provided by michael richardson i noticed that
he pointed to a threat which is not described in full detail in the current
draft version:

"
the MAJOR threat I can see if that the middle system has to
	    demonstration it is really on the forwarding path, ...
" 

i have tried to include the description of this threat into the nat/fw nslp
threats document but it was rejected since it was not clear whether it
belongs to the ntlp or to the nslp. for the "security threats for nsis"
draft this separation does not matter and hence i thought that it would be
good to add it there. 
 
please take a look at section 3.1. 

the current snapshot can be found at: 
http://www.tschofenig.priv.at/snapshot/draft-ietf-nsis-threats-05_13June2004.htm
l
http://www.tschofenig.priv.at/snapshot/draft-ietf-nsis-threats-05_13June2004.txt

a diff version is available at:
http://www.tschofenig.priv.at/snapshot/draft-ietf-nsis-threats-05_13June-from-11
June.diff.html

ciao
hannes
 


_______________________________________________
nsis mailing list
nsis at ietf.org
https://www1.ietf.org/mailman/listinfo/nsis