Re: [quicwg/base-drafts] Add initial threat model to security considerations (#2925)

Eric Kinnear <notifications@github.com> Sat, 16 November 2019 13:37 UTC

Date: Sat, 16 Nov 2019 05:37:21 -0800
From: Eric Kinnear <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+AFTOJK3GLUSY6AWUVWIMZLV33UXBDEVBNHHBYGSUE4@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/2925/review/317970974@github.com>
In-Reply-To: <quicwg/base-drafts/pull/2925@github.com>
References: <quicwg/base-drafts/pull/2925@github.com>
Subject: Re: [quicwg/base-drafts] Add initial threat model to security considerations (#2925)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5dcffb917f6e7_720e3f8959ecd96c135242a"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/3s2-mBRnfCfdQdRB1sOkqwD3Dzk>

erickinnear commented on this pull request.



> +save observed QUIC packets for an offline attack against QUIC packet protection
+at a future time; this is true for any observer of any packet on any network.
+
+
+#### Active Attacks
+
+An active attack ({{?RFC3552}}) involves writing data to the network.  An
+attacker with such a capability might be in a position to additionally prevent
+the original packets it observes from reaching their intended destination.  If
+so, they are considered to be an on-path attacker.
+
+An active attacker may also choose to rewrite the source or destination IP
+addresses of packets that it forwards or injects. Such spoofing attacks are only
+effective against a QUIC connection if the attacker can still forward the
+contents of the packets to the original endpoint, since QUIC connections are
+both authenticated and encrypted.

Reworded and moved this around to hopefully be more clear

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2925#discussion_r347091898

[quicwg/base-drafts] Add initial threat model app… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Nick Banks
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Dmitri Tikhonov
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… ianswett
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… mirjak
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Gorry Fairhurst
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… ianswett
Re: [quicwg/base-drafts] Add initial threat model… Jana Iyengar
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… MikkelFJ
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… MikkelFJ