HTTP/1.1", RFC2817, May 2000.
[URL] Berners-Lee, T., Masinter, M. and M. McCahill, "Uniform
Resource Locators (URL)", RFC1738, December 1994.
[VRRP] Knight, S., Weaver, D., Whipple, D., Hinden, R., Mitzel,
D., Hunt, P., Higginson, P., Shand, M. and A. Lindemn,
"Virtual Router Redundancy Protocol", RFC2338, April
1998.
9. Informative References
[DDOS] "Denial-Of-Service Tools" CERT Advisory CA-1999-17, 28
December 1999, CERT http://www.cert.org/advisories/CA-
1999-17.html
[EKE] Bellovin, S., Merritt, M., "Encrypted Key Exchange:
Password-based protocols secure against dictionary
attacks", Proceedings of the IEEE Symposium on Research in
Security and Privacy, May 1992.
[IDENT] St. Johns, M. and M. Rose, "Identification Protocol", RFC
1414, February 1993.
[INTAUTH] Haller, N. and R. Atkinson, "On Internet Authentication",
RFC1704, October 1994.
[IPSPPROB] Bellovin, S. M., "Problem Areas for the IP Security
Protocols", Proceedings of the Sixth Usenix UNIX Security
Symposium, July 1996.
[KLEIN] Klein, D.V., "Foiling the Cracker: A Survey of and
Improvements to Password Security", 1990.
[NNTP] Kantor, B. and P. Lapsley, "Network News Transfer
Protocol", RFC977, February 1986.
[POP] Myers, J. and M. Rose, "Post Office Protocol - Version 3",
STD 53, RFC1939, May 1996.
[SEQNUM] Morris, R.T., "A Weakness in the 4.2 BSD UNIX TCP/IP
Software", AT&T Bell Laboratories, CSTR 117, 1985.
[SOAP] Box, D., Ehnebuske, D., Kakivaya, G., Layman, A.,
Mendelsoh, N., Nielsen, H., Thatte, S., Winer, D., "Simple
Object Access Protocol (SOAP) 1.1", May 2000.
[SPEKE] Jablon, D., "Strong Password-Only Authenticated Key
Exchange", Computer Communication Review, ACM SIGCOMM,
vol. 26, no. 5, pp. 5-26, October 1996.
[SRP] Wu T., "The Secure Remote Password Protocol", ISOC NDSS
Symposium, 1998.
[USEIPSEC] Bellovin, S., "Guidelines for Mandating the Use of IPsec",
Work in Progress.
[WEP] Borisov, N., Goldberg, I., Wagner, D., "Intercepting
Mobile Communications: The Insecurity of 802.11",
http://www.isaac.cs.berkeley.edu/isaac/wep-draft.pdf
10. Security Considerations
This entire document is about security considerations.
Appendix A.
IAB Members at the time of this writing
Harald Alvestrand
Ran Atkinson
Rob Austein
Fred Baker
Leslie Daigle
Steve Deering
Sally Floyd
Ted Hardie
Geoff Huston
Charlie Kaufman
James Kempf
Eric Rescorla
Mike St. Johns
Authors' Addresses
Eric Rescorla
RTFM, Inc.
2439 Alvin Drive
Mountain View, CA 94043
Phone: (650)-320-8549
EMail: ekr@rtfm.com
Brian Korver
Xythos Software, Inc.
77 Maiden Lane, 6th Floor
San Francisco, CA, 94108
Phone: (415)-248-3800
EMail: briank@xythos.com
Internet Architecture Board
IAB
EMail: iab@iab.org
Full Copyright Statement
Copyright (C) The Internet Society (2003). All Rights Reserved.
This document and translations of it may be copied and furnished to
others, and derivative works that comment on or otherwise explain it
or assist in its implementation may be prepared, copied, published
and distributed, in whole or in part, without restriction of any
kind, provided that the above copyright notice and this paragraph are
included on all such copies and derivative works. However, this
document itself may not be modified in any way, such as by removing
the copyright notice or references to the Internet Society or other
Internet organizations, except as needed for the purpose of
developing Internet standards in which case the procedures for
copyrights defined in the Internet Standards process must be
followed, or as required to translate it into languages other than
English.
The limited permissions granted above are perpetual and will not be
revoked by the Internet Society or its successors or assigns.
This document and the information contained herein is provided on an
"AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION
HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Acknowledgement
Funding for the RFCEditor function is currently provided by the
Internet Society.