Re: [quicwg/base-drafts] Add initial threat model to security considerations (#2925)

Eric Kinnear <notifications@github.com> Sat, 16 November 2019 13:36 UTC

Date: Sat, 16 Nov 2019 05:36:52 -0800
From: Eric Kinnear <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+AFTOJKZEZ7TTGEKQ27SAKG533UW7JEVBNHHBYGSUE4@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/2925/review/317970951@github.com>
In-Reply-To: <quicwg/base-drafts/pull/2925@github.com>
References: <quicwg/base-drafts/pull/2925@github.com>
Subject: Re: [quicwg/base-drafts] Add initial threat model to security considerations (#2925)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5dcffb74ec4c5_64583fdb954cd960276273"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/MBoqomhrGmK1QZ6LVFE9XdJpd1Q>

erickinnear commented on this pull request.



> +Both on-path and off-path attackers can mount a passive attack in which they
+save observed QUIC packets for an offline attack against QUIC packet protection
+at a future time; this is true for any observer of any packet on any network.

Moved this into short header section (and renamed that to packet protection, since technically that's not unique to SH even if this is not handshake-specific). Generally moved a bunch of text up, as well.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2925#discussion_r347091878

[quicwg/base-drafts] Add initial threat model app… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Nick Banks
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Dmitri Tikhonov
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… ianswett
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… mirjak
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Gorry Fairhurst
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… ianswett
Re: [quicwg/base-drafts] Add initial threat model… Jana Iyengar
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… MikkelFJ
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… MikkelFJ