RFC 7413, "TCP Fast Open", December 2014

Errata ID: 8013
Status: Verified
Type: Editorial
Publication Format(s) : TEXT
Reported By: Bart Overkamp
Date Reported: 2024-07-02
Verifier Name: RFC Editor
Date Verified: 2024-08-16

Section 4.2 says:

   PendingFastOpenRequests: tracks the number of TFO connections in SYN-
      RCVD state.  If this variable goes over a preset system limit, the
      server MUST disable TFO for all new connection requests until
      PendingFastOpenRequests drops below the system limit.  This
      variable is used for defending some vulnerabilities discussed in
      the "Security Considerations" section (Section 5).

It should say:

   PendingFastOpenRequests: tracks the number of TFO connections in SYN-
      RCVD state.  If this variable goes over a preset system limit, the
      server MUST disable TFO for all new connection requests until
      PendingFastOpenRequests drops below the system limit.  This
      variable is used for defending against some vulnerabilities 
      discussed in the "Security Considerations" section (Section 5).

Notes:

The original text seems to suggest defending (the existence of) some vulnerabilities

Report New Errata