Comment

NSA Denies Bloomberg 'Heartbleed' Report Based on Unidentified Sources

98
unproven innocence4/11/2014 3:52:53 pm PDT

re: #82 dog philosopher

what was inadequate about always replying merely ‘ACK’??

Because UDP is connectionless, the ‘from’ addr field of packets can be spoofed. The heartbeat protocol thing was added to the UDP based flavor of TSL which is called DTLS. The TCP based flavor of TLS got a similar makeover, but with some differences of course. [edits]