Security Basics mailing list archives

Re: Why TCP is more secure than UDP?


From: krymson () gmail com
Date: 10 Jul 2007 14:22:45 -0000

I think the only real difference that matters is the sequencing numbers that TCP uses. If I wanted to inject or break  
your TCP session, I'd need to know the sequence numbers you're using. With UDP, I can't necessarily break your 
connection, but I could inject odd, spoofed UDP packets into your stream and hope I make your application freak out.

Pre-handshake spoofing in TCP is just as easy as spoofing in UDP.

<- snip ->
It is said that UDP is considered more vulnerable to spoofing than TCP?

Can anyone point me to any document/link which describes TCP is more secure than UDP


Current thread: