IETF Logo Mail Archive

Re: [quicwg/base-drafts] Make EOED transmission optional in QUIC, please (#1518)

ekr <notifications@github.com> Sat, 01 September 2018 18:21 UTC

Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 493ED1277CC for <quic-issues@ietfa.amsl.com>; Sat, 1 Sep 2018 11:21:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.009
X-Spam-Level:
X-Spam-Status: No, score=-8.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gHr2QEJ9XOEO for <quic-issues@ietfa.amsl.com>; Sat, 1 Sep 2018 11:21:31 -0700 (PDT)
Received: from out-15.smtp.github.com (out-15.smtp.github.com [192.30.254.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DA01130E34 for <quic-issues@ietf.org>; Sat, 1 Sep 2018 11:21:31 -0700 (PDT)
Date: Sat, 01 Sep 2018 11:21:30 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1535826090; bh=Mrvc97iG2xrFytXfONhMLSgBiNWvVo7wJbbg8fRebyY=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=JauocPSM1zzUTjFqSMIeLjmSq4sLTZP8zjoZuGhJZRkICoXNYTgpIoB+k4ucIk94u Ip8/sopvxHN3qJXys2LeRhdCMcPrVxOG6JbU74luiI4lAp5d3REKvKhdaXz5SPL8nA OH3wiv5eCg4XmXezgtRKGLy++IzTFVnNodwVOVxU=
From: ekr <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+0166e4ab9acd38a31e3d28a0f30c8c48f0fa9fd589ec809c92cf0000000117a29aaa92a169ce1427404b@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/1518/417878142@github.com>
In-Reply-To: <quicwg/base-drafts/issues/1518@github.com>
References: <quicwg/base-drafts/issues/1518@github.com>
Subject: Re: [quicwg/base-drafts] Make EOED transmission optional in QUIC, please (#1518)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5b8ad8aa8be2d_455b3fb171ad45b412362b"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: ekr
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/FpLzNnR3R_d6x4rTz3_dCm2Hofg>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.27
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Sep 2018 18:21:32 -0000

I don't think the main issue is compatibility with the existing TLS implementations but rather (a) having consistency with TLS and (b) reasoning about the security properties of the protocol. From this perspective, carrying it in handshake encryption is quite bad, because it's a big change that's hard to reason about.

However, even in a datagram protocol removing EOED does change those properties: EOED tells you that you will not receive messages with 0-RTT keys but with greater PNs. It's not clear if that property is important, but we should try to actually reason about it (this applies to DTLS as well, I imagine).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1518#issuecomment-417878142

v2.29.0 | Report a Bug | By Email | System Status