Re: [quicwg/base-drafts] Handshake errors (#608)

[ekr <[e-mail]>]

The plan was that Server Cleartext is going to be integrity protected with
a key derived from the client connection ID. I'll try to get to the PR this
week.



On Tue, Sep 19, 2017 at 2:52 PM, janaiyengar <[e-mail]>
wrote:

> Revisiting this question, I think we have a small bit of a pickle. From
> #645 <https://github.com/quicwg/base-drafts/issues/645>, we agreed in
> Prague that "Off-path attacks would be protected against by using return
> routeability/proof of receipt." Server Cleartext carries a brand new packet
> number and carries a server-chosen connection ID, which means there's no
> proof of receipt in this packet. We should address this.
>
> We could simply require that a Server Cleartext packet that closes a
> connection MUST echo the client's connection ID. This ought to be ok, since
> this connection is getting torn down, so there won't be a need to use a new
> connection ID anyways.
>
> —
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly, view it on GitHub
> <https://github.com/quicwg/base-drafts/issues/608#issuecomment-330684602>,
> or mute the thread
> <https://github.com/notifications/unsubscribe-auth/ABD1oVQj_68E-jWMA1-xNO4SCsr28bsEks5skDetgaJpZM4NytAA>
> .
>


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/608#issuecomment-330686471