Date: Sun, 23 Dec 2018 20:06:27 -0800
From: Martin Thomson <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4abd570635745366f209381ccb7074ddac95af2eab292cf0000000118381d4392a169ce17719422@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/2241/c449683536@github.com>
In-Reply-To: <quicwg/base-drafts/pull/2241@github.com>
References: <quicwg/base-drafts/pull/2241@github.com>
Subject: Re: [quicwg/base-drafts] Remove PATH_RESPONSE limits (#2241)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5c205b437e47a_52433f9b81ad45c4116151b";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/Lk9VhIoM8vN0bUid_WaXBQdwd88>


----==_mimepart_5c205b437e47a_52433f9b81ad45c4116151b
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

The counter measure we have against amplification is the initial congestion window.  We won't send more than that.  That's higher than the x3 we have during the handshake, but I think that's a reasonable balance, considering that the attacker in this context has to spend a considerable amount of effort.

Yes, this is a policy question, but I'm happy with it.  (Though we should probably highlight this when asking for review.)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2241#issuecomment-449683536
----==_mimepart_5c205b437e47a_52433f9b81ad45c4116151b
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<p>The counter measure we have against amplification is the initial conge=
stion window.  We won't send more than that.  That's higher than the x3 w=
e have during the handshake, but I think that's a reasonable balance, con=
sidering that the attacker in this context has to spend a considerable am=
ount of effort.</p>
<p>Yes, this is a policy question, but I'm happy with it.  (Though we sho=
uld probably highlight this when asking for review.)</p>

<p style=3D"font-size:small;-webkit-text-size-adjust:none;color:#666;">&m=
dash;<br />You are receiving this because you are subscribed to this thre=
ad.<br />Reply to this email directly, <a href=3D"https://github.com/quic=
wg/base-drafts/pull/2241#issuecomment-449683536">view it on GitHub</a>, o=
r <a href=3D"https://github.com/notifications/unsubscribe-auth/AWbkq1CrPI=
YXmdktAig0LmGO5ZYJg7TAks5u8FLDgaJpZM4ZdYU2">mute the thread</a>.<img src=3D=
"https://github.com/notifications/beacon/AWbkq2PBNSoj0-yklsd14VhFvi9hdrDd=
ks5u8FLDgaJpZM4ZdYU2.gif" height=3D"1" width=3D"1" alt=3D"" /></p>
<script type=3D"application/json" data-scope=3D"inboxmarkup">{"api_versio=
n":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name"=
:"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"=
quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"http=
s://github.githubassets.com/images/email/message_cards/header.png","avata=
r_image_url":"https://github.githubassets.com/images/email/message_cards/=
avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/q=
uicwg/base-drafts"}},"updates":{"snippets":[{"icon":"PERSON","message":"@=
martinthomson in #2241: The counter measure we have against amplification=
 is the initial congestion window.  We won't send more than that.  That's=
 higher than the x3 we have during the handshake, but I think that's a re=
asonable balance, considering that the attacker in this context has to sp=
end a considerable amount of effort.\r\n\r\nYes, this is a policy questio=
n, but I'm happy with it.  (Though we should probably highlight this when=
 asking for review.)"}],"action":{"name":"View Pull Request","url":"https=
://github.com/quicwg/base-drafts/pull/2241#issuecomment-449683536"}}}</sc=
ript>
<script type=3D"application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/pull/2241#issuecomment-4=
49683536",
"url": "https://github.com/quicwg/base-drafts/pull/2241#issuecomment-4496=
83536",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>=

----==_mimepart_5c205b437e47a_52433f9b81ad45c4116151b--