> > >Encryption doesn't protect against TCP hijacking. Disconnection does.
> >
> > Why wouldn't it?
> >
>
> It can still be hijacked, nonetheless, the equivalent of a denial
> of service attack. Encryption simply protects the data in the stream.
Hijacked means that the person hijacking the connection takes over the
connection and is able to send their own data to the end system/process
and have it accepted as that coming from the original source. This
can't on a strongly encrypted connection.
Denial of service is a different matter, but again encryption can remove
some types of denial of service attacks and open some new ones.
geoff
References:
|
|
