[OASIS Issue Tracker] Commented: (MQTT-8) Create a new CONNACK return code to indicate that the CONNECT packet was malformed.

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

    [ http://tools.oasis-open.org/issues/browse/MQTT-8?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=33542#action_33542 ] 

Raphael Cohen commented on MQTT-8:
----------------------------------

I can see the use case, but I feel that many brokers will want to simply kill the TCP connection dead...

If we make this MAY, then we give information to an attacker who can exploit the differences in behaviour to sniff a broker type...

> Create a new CONNACK return code to indicate that the CONNECT packet was malformed.
> -----------------------------------------------------------------------------------
>
>                 Key: MQTT-8
>                 URL: http://tools.oasis-open.org/issues/browse/MQTT-8
>             Project: OASIS Message Queuing Telemetry Transport (MQTT) TC
>          Issue Type: Improvement
>          Components: core
>         Environment: MQTT Server
>            Reporter: Andrew Banks
>
> The server should flow a new CONNACK with a new return code before disconnecting the TCP session if it receives a CONNECT message which is malformed.
> Malformed means that the protocol name and version are correct but something else is incorrect, for example a User Name flag is set to indicate there is a User Name in the payload but the payload is empty.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira