RFC 5961: Improving TCP's Robustness to Blind In-Window Attacks

TCP has historically been considered to be protected against spoofed off-path packet injection attacks by relying on the fact that it is difficult to guess…

Read RFC 5961 on the RFC Editor

Outgoing relationships (11 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 793: Transmission Control Protocol
Informative reference — RFC 4271: A Border Gateway Protocol 4 (BGP-4)
Informative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Informative reference — RFC 1122: Requirements for Internet Hosts - Communication Layers
Informative reference — RFC 4302: IP Authentication Header
Informative reference — RFC 1323: TCP Extensions for High Performance
Informative reference — RFC 2385: Protection of BGP Sessions via the TCP MD5 Signature Option
Informative reference — RFC 4953: Defending TCP Against Spoofing Attacks
Informative reference — RFC 1948: Defending Against Sequence Number Attacks
Informative reference — RFC 5927: ICMP Attacks against TCP

Incoming relationships (14 related RFCs)

Updated by, Normatively referenced by — RFC 9293: Transmission Control Protocol (TCP)
Normatively referenced by — RFC 8684: TCP Extensions for Multipath Operation with Multiple Addresses
Normatively referenced by — RFC 7414: A Roadmap for Transmission Control Protocol (TCP) Specification Documents
Normatively referenced by — RFC 7430: Analysis of Residual Threats and Possible Fixes for Multipath TCP (MPTCP)
Normatively referenced by — RFC 7618: Dynamic Allocation of Shared IPv4 Addresses
Normatively referenced by — RFC 9768: More Accurate Explicit Congestion Notification (AccECN) Feedback in TCP
Informatively referenced by — RFC 6269: Issues with IP Address Sharing
Informatively referenced by — RFC 6952: Analysis of BGP, LDP, PCEP, and MSDP Issues According to the Keying and Authentication for Routing Protocols (KARP) Design Guide
Informatively referenced by — RFC 7597: Mapping of Address and Port with Encapsulation (MAP-E)
Informatively referenced by — RFC 6675: A Conservative Loss Recovery Algorithm Based on Selective Acknowledgment (SACK) for TCP
Informatively referenced by — RFC 6182: Architectural Guidelines for Multipath TCP Development
Informatively referenced by — RFC 7599: Mapping of Address and Port using Translation (MAP-T)
Informatively referenced by — RFC 7675: Session Traversal Utilities for NAT (STUN) Usage for Consent Freshness
Informatively referenced by — RFC 9329: TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets