In general, which is more secure, a connection-less or connection-oriented transport protocol? Does the type of threat make a difference? For example, what if the attacker is not along the network...

In general, which is more secure, a connection-less or connection-oriented

transport protocol? Does the type of threat make a difference? For example,

what if the attacker is not along the network path between the client and

server, and what if he is?