Problems with Session Traversal Utilities for NAT Long-Term Authentication for Traversal Using Relays around NAT
RFC 7376, “Problems with Session Traversal Utilities for NAT Long-Term Authentication for Traversal Using Relays around NAT”, is an Informational document published in September 2014 by T. Reddy, R. Ravindranath, M. Perumal, A. Yegin. The canonical text is published by the RFC Editor.
Abstract
This document discusses some of the security problems and practical problems with the current Session Traversal Utilities for NAT (STUN) authentication for Traversal Using Relays around NAT (TURN) messages.
What “Informational” means
Published for the general information of the community. It does not define an IETF standard and carries no standards-track status.
The canonical text of RFC 7376 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 7375 Secure Telephone Identity Threat Model
- RFC 7377 IMAP4 Multimailbox SEARCH Extension
- RFC 7374 Service Discovery Usage for REsource LOcation And Discovery
- RFC 7378 Trustworthy Location
- RFC 7373 Textual Representation of IP Flow Information Export Abstract Data Types
- RFC 7379 Problem Statement and Goals for Active-Active Connection at the Transparent Interconnection of Lots of Links Edge
- RFC 7372 Email Authentication Status Codes
- RFC 7380 RTP Control Protocol Extended Report Block for MPEG2 Transport Stream Program Specific Information Decodability Statistics Metrics Reporting