Feature #10499
Verify the IP address of the sender in the channel change message
Start date:
10/13/2015
Due date:
% Done:
0%
Estimated time:
Description
On line 196 of DCProtocol, there is a "TODO" comment that suggests that we verify that the IP address in the change-channel message matches the IP address of the actual Internet sender.
The message asks for this check, but we do not do it. Moreover, it is not clear that (a) this adds any security and (b) that this is a useful thing.
History
#1 Updated by Elliott McCrory over 2 years ago
- Status changed from New to Remission
This is theoretically possible, but, in practical terms, very hard to do. So, declaring it "in remission"