<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div style="line-height:1.6;font-family:'苹方','微软雅黑','sans-serif';">Hi，<br> Thank you very much for helping me solve this problem.<br> <br>Best regards,<br>Xue Meng<br><br><br><br><br><span style="background-color:rgb(242,242,242);"><font style="font-size:14px;"><span style="background-color:rgb(242,242,242);"><font style="color:rgb(0,0,0);">On 11/06/2018 11:36, </font><font style="color:rgb(42,151,255);"><a href="mailto:lixia@cs.ucla.edu">Lixia Zhang</a></font> wrote:<br></span></font></span><br>On Nov 5, 2018, at 7:20 PM, mengxue <<a href="mailto:mengxue_1224@126.com">mengxue_1224@126.com</a>> wrote:<br><br><font style="font-size:14px;">Hi, all <br><br> Thank you for your reading!<br> I have some doubts about the security issues of the Interest. What I have learned is that an Interest packet is not secured by design(such as no signature).So I wonder if an attacker can modify the elements of the original Interest, such as changing one name component ,or changing the Selector part or changing the Nonce part or changing the additional part added to the Interest by the developers.<br> Thank you very much!<br></font><br>first, some nits: <br>- there is no more selector (see the current protocol spec)<br>- data fetching interests for publicly accessible data are not signed; they have no logical side effect on producers in general (and not signing has the benefit of obscuring requesters).<br>- an interest can and should be signed, if it leads to an effect (e.g. a command interest).<br><br>second: the above mentioned interests modifications assume that an attacker is MIM (man-in-middle, i.e. on interest forwarding path): in this case the attacker can already do denial of service by dropping the interests; modifying interests is likely leading to the same result<br><br></div><div class="ne-quoted"> <a href="https://maas.mail.163.com/dashi-web-extend/html/proSignature.html?iconUrl=https%3A%2F%2Fmail-online.nosdn.127.net%2Fqiyelogo%2FdefaultAvatar.png&name=mengxue&uid=mengxue_1224%40126.com&ftlId=1&items=%5B%22%E9%82%AE%E7%AE%B1%EF%BC%9Amengxue_1224%40126.com%22%5D" style="display:block;background:#fff; max-width: 400px; _width: 400px;padding:15px 0 10px 0;text-decoration: none; outline:none;-webkit-tap-highlight-color:transparent;-webkit-text-size-adjust:none !important;text-size-adjust:none !important;">
<table cellpadding="0" style="width: 100%; max-width: 100%; table-layout: fixed; border-collapse: collapse;color: #9b9ea1;font-size: 14px;line-height:1.3;-webkit-text-size-adjust:none !important;text-size-adjust:none !important;">
<tbody style="font-family: 'PingFang SC', 'Hiragino Sans GB','WenQuanYi Micro Hei', 'Microsoft Yahei', '微软雅黑', verdana !important; word-wrap:break-word; word-break:break-all;-webkit-text-size-adjust:none !important;text-size-adjust:none !important;">
<tr>
<td width="38" style="padding:0; box-sizing: border-box; width: 38px;">
<img width="38" height="38" style="vertical-align:middle; width: 38px; height: 38px; border-radius:50%;" src="https://mail-online.nosdn.127.net/qiyelogo/defaultAvatar.png">
</td>
<td style="padding: 0 0 0 10px; color: #31353b;">
<div style="font-size: 16px;font-weight:bold; width:100%; white-space: nowrap; overflow:hidden;text-overflow: ellipsis;">mengxue</div>
</td>
</tr>
<tr width="100%" style="font-size: 14px !important; width: 100%;">
<td colspan="2" style="padding:10px 0 0 0; font-size:14px !important; width: 100%;">
<div style="width: 100%;font-size: 14px !important;word-wrap:break-word;word-break:break-all;">邮箱：mengxue_1224@126.com</div>
</td>
</tr>
</tbody>
</table>
</a><html><body><p style="border-top:1px solid #e5e5e5;padding-top: 8px; font-size: 12px; color:#b6b8bb;line-height: 1.833;">签名由 <a href="https://mail.163.com/dashi/dlpro.html?from=mail88" style="color:#6aa8f6;text-decoration: none">网易邮箱大师</a> 定制</p></body></html></div>
</body>
</html>