On Wed, 28 Jan 2015 17:01:50 -0800, jungle Boogie wrote: > Hi Nick, > On Jan 28, 2015 4:56 PM, "Nick Frampton" <nick.framp...@akips.com> wrote: > > > > On 29/01/15 08:46, Joe Holden wrote: > >> > >> Really, how many SCTP users are there om the wild... maybe one? > >> > >> It shouldn't be in GENERIC at the very least! > > > > > > We use Netflow over SCTP in our network monitoring product, so it would > be a pain to have to build a custom kernel. > > But also a pain to have an exploit when it could be prevented.
Are you vulnerable to an SCTP exploit if you're not using SCTP? > Its all about trade offs, right? I seem to recall similar resistance to including IPv6 into GENERIC .. It _would_ be good to know more about who's using SCTP, and for what usage cases it has tangible benefits over TCP, but I guess not here. cheers, Ian _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"
