Date: Sun, 03 Feb 2019 13:55:51 -0800
From: Martin Thomson <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4ab9e932009a1f6b1be110533da349484427f3ee2ab92cf00000001186f256792a169ce1823c7c2@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/2394/460092507@github.com>
In-Reply-To: <quicwg/base-drafts/issues/2394@github.com>
References: <quicwg/base-drafts/issues/2394@github.com>
Subject: Re: [quicwg/base-drafts] Spoofed retry token attack on IP
 authentication (#2394)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5c576367172c5_2f73f8c1e2d45bc7561ca";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/FK8FlbkidUMSO8LslfWWAnv2N5w>


----==_mimepart_5c576367172c5_2f73f8c1e2d45bc7561ca
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

This is a fairly non-interesting attack.  I read this as saying that if you can send and receive packets for a given IP address you can make connections from that address.  From the perspective of what we can reasonably test, there is no distinction between that and genuinely owning the address.

The point about the number of times that Retry tokens can be used is a fine one.  Adding a note about expected lifetime of these tokens to [Section 8.1.1](https://quicwg.org/base-drafts/draft-ietf-quic-transport.html#validate-retry) is a fine idea.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2394#issuecomment-460092507
----==_mimepart_5c576367172c5_2f73f8c1e2d45bc7561ca
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<p>This is a fairly non-interesting attack.  I read this as saying that i=
f you can send and receive packets for a given IP address you can make co=
nnections from that address.  From the perspective of what we can reasona=
bly test, there is no distinction between that and genuinely owning the a=
ddress.</p>
<p>The point about the number of times that Retry tokens can be used is a=
 fine one.  Adding a note about expected lifetime of these tokens to <a h=
ref=3D"https://quicwg.org/base-drafts/draft-ietf-quic-transport.html#vali=
date-retry" rel=3D"nofollow">Section 8.1.1</a> is a fine idea.</p>

<p style=3D"font-size:small;-webkit-text-size-adjust:none;color:#666;">&m=
dash;<br />You are receiving this because you are subscribed to this thre=
ad.<br />Reply to this email directly, <a href=3D"https://github.com/quic=
wg/base-drafts/issues/2394#issuecomment-460092507">view it on GitHub</a>,=
 or <a href=3D"https://github.com/notifications/unsubscribe-auth/AWbkq6JS=
w5xG-d6Rjm9SZWZ_sGVmPcgUks5vJ1rngaJpZM4abNcD">mute the thread</a>.<img sr=
c=3D"https://github.com/notifications/beacon/AWbkqx5Z288lbIb8LNVz28m6XP_s=
ljgNks5vJ1rngaJpZM4abNcD.gif" height=3D"1" width=3D"1" alt=3D"" /></p>
<script type=3D"application/json" data-scope=3D"inboxmarkup">{"api_versio=
n":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name"=
:"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"=
quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"http=
s://github.githubassets.com/images/email/message_cards/header.png","avata=
r_image_url":"https://github.githubassets.com/images/email/message_cards/=
avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/q=
uicwg/base-drafts"}},"updates":{"snippets":[{"icon":"PERSON","message":"@=
martinthomson in #2394: This is a fairly non-interesting attack.  I read =
this as saying that if you can send and receive packets for a given IP ad=
dress you can make connections from that address.  From the perspective o=
f what we can reasonably test, there is no distinction between that and g=
enuinely owning the address.\r\n\r\nThe point about the number of times t=
hat Retry tokens can be used is a fine one.  Adding a note about expected=
 lifetime of these tokens to [Section 8.1.1](https://quicwg.org/base-draf=
ts/draft-ietf-quic-transport.html#validate-retry) is a fine idea."}],"act=
ion":{"name":"View Issue","url":"https://github.com/quicwg/base-drafts/is=
sues/2394#issuecomment-460092507"}}}</script>
<script type=3D"application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/issues/2394#issuecomment=
-460092507",
"url": "https://github.com/quicwg/base-drafts/issues/2394#issuecomment-46=
0092507",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>=

----==_mimepart_5c576367172c5_2f73f8c1e2d45bc7561ca--