F
F
floppa3222020-11-15 17:03:46
Computer networks
floppa322, 2020-11-15 17:03:46

User identification by IP + Port?

Hello everyone

There is some protocol over UDP (encryption is also used).
Connections are identified by IP + Port.
Protection against IP + Port Spoofing consists in checking the packet's mac(message authentication code) using the hmac key associated with the packet's current IP + Port.

Problem: Since users may be mobile clients, their IP may change as they move. So identification by IP + Port is not suitable.
There is an idea instead of a bunch of port and ip to identify the user by UUID.
What are the downsides to this approach? (except that the packet size will grow by 16 bytes)
Well, or maybe this problem can be solved somehow differently, without UUID?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question