Date: Thu, 13 Dec 2018 14:11:10 -0800
From: ekr <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4ab98c97690ec2ff0685c8d4246c3700d66befed6fb92cf00000001182a9afe92a169ce174c60de@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/2163@github.com>
Subject: [quicwg/base-drafts] ECN attacks (#2163)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5c12d8fe5e40f_15733f85462d45b4182151";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/ABJulwDGKfVbmiZgvK6BrAmphmw>


----==_mimepart_5c12d8fe5e40f_15733f85462d45b4182151
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

S 21.7 

```
An on-the-side attacker can duplicate and send packets with modified ECN
codepoints to affect the sender's rate.  If duplicate packets are discarded by a
receiver, an off-path attacker will need to race the duplicate packet against
the original to be successful in this attack.  Therefore, QUIC receivers ignore
ECN codepoints set in duplicate packets (see {{ecn}}).
```

This could use more elaboration. As written, it seems like if you win the race (which you might like half the time) then you will succeed in the attack. Is that true?


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2163
----==_mimepart_5c12d8fe5e40f_15733f85462d45b4182151
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p>S 21.7</p>
<pre><code>An on-the-side attacker can duplicate and send packets with modified ECN
codepoints to affect the sender's rate.  If duplicate packets are discarded by a
receiver, an off-path attacker will need to race the duplicate packet against
the original to be successful in this attack.  Therefore, QUIC receivers ignore
ECN codepoints set in duplicate packets (see {{ecn}}).
</code></pre>
<p>This could use more elaboration. As written, it seems like if you win the race (which you might like half the time) then you will succeed in the attack. Is that true?</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/quicwg/base-drafts/issues/2163">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AWbkqyO3Z6ZgTOCS2M8H16-z5zwDYJTwks5u4tB-gaJpZM4ZShOD">mute the thread</a>.<img src="https://github.com/notifications/beacon/AWbkq3pu-lF1hu_ofSHWzuu9Sz_Fb6Dvks5u4tB-gaJpZM4ZShOD.gif" height="1" width="1" alt="" /></p>
<script type="application/json" data-scope="inboxmarkup">{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"https://github.githubassets.com/images/email/message_cards/header.png","avatar_image_url":"https://github.githubassets.com/images/email/message_cards/avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/quicwg/base-drafts"}},"updates":{"snippets":[{"icon":"DESCRIPTION","message":"ECN attacks (#2163)"}],"action":{"name":"View Issue","url":"https://github.com/quicwg/base-drafts/issues/2163"}}}</script>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/issues/2163",
"url": "https://github.com/quicwg/base-drafts/issues/2163",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>
----==_mimepart_5c12d8fe5e40f_15733f85462d45b4182151--