Re: [quicwg/base-drafts] HTTP/3 references QUIC Stream IDs directly, allowing illegal references (#3273)

Kazuho Oku <> Thu, 05 December 2019 01:20 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 909A2120809 for <>; Wed, 4 Dec 2019 17:20:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -5.883
X-Spam-Status: No, score=-5.883 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (1024-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id 112KDQ_cyg6n for <>; Wed, 4 Dec 2019 17:20:46 -0800 (PST)
Received: from ( []) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 78A6B120980 for <>; Wed, 4 Dec 2019 17:20:39 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id 6D8A41C2F2C for <>; Wed, 4 Dec 2019 17:20:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=pf2014; t=1575508838; bh=5jHKEykCUILGInotMm8Mhg0+7hrgR4R9ih1V3EUOUXw=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=kDlYBOYvAKOZLqMkwa1cU25nV7POsUODxY3dkoLVxjcAM0uZTaYiCvMEWoM/pcGuP AasU/2/eMd5O19qQoRXKMKFmi9CUgWrW5R4qAOASxFun9QIqV9RHhpCfsBi9qc0qva bSE3oUGG6rT6hsDx4iHMvy91n2hbJl+YXEQ3VyoM=
Date: Wed, 04 Dec 2019 17:20:38 -0800
From: Kazuho Oku <>
Reply-To: quicwg/base-drafts <>
To: quicwg/base-drafts <>
Cc: Subscribed <>
Message-ID: <quicwg/base-drafts/issues/3273/>
In-Reply-To: <quicwg/base-drafts/issues/>
References: <quicwg/base-drafts/issues/>
Subject: Re: [quicwg/base-drafts] HTTP/3 references QUIC Stream IDs directly, allowing illegal references (#3273)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5de85b665b047_85a3f90062cd96013022b"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: kazuho
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
Archived-At: <>
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 05 Dec 2019 01:20:47 -0000

I think I agree with @ianswett.

One trivial example is the value of GOAWAY.stream_id when the server closes an HTTP/3 connection that has carried no request. In such case, it is my understanding that GOAWAY.stream_id should be zero. But how does the server determine that value?

You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub: