Re: [quicwg/base-drafts] Client's initial source CID is unauthenticated (#1479)
Christopher Wood <notifications@github.com> Wed, 27 June 2018 03:02 UTC
Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFD70130E7D for <quic-issues@ietfa.amsl.com>; Tue, 26 Jun 2018 20:02:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.01
X-Spam-Level:
X-Spam-Status: No, score=-8.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kehYf1t2MpL6 for <quic-issues@ietfa.amsl.com>; Tue, 26 Jun 2018 20:02:10 -0700 (PDT)
Received: from out-2.smtp.github.com (out-2.smtp.github.com [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A316126F72 for <quic-issues@ietf.org>; Tue, 26 Jun 2018 20:02:10 -0700 (PDT)
Date: Tue, 26 Jun 2018 20:02:09 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1530068529; bh=KPdX3QsV/ncbZkf2Mgv0B+0RFGouwyTPM3z1gucpzTU=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=ETzsHTytVFWaDQDiCGud7RgNt266vztXf5uj5KIcD7xQY/6qYFSX24LsNStf7DOUc X/qSlgz90rIjmt9nWx4ffg131a134HDFFrsFtgSebjQ5T10lMlyAvTFyVDRLpjl79Q KO7+eJEeCXT2IrYQzGn3MzIhL/s7rOgX6m2I3/4o=
From: Christopher Wood <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+0166e4ab70dee7abe274b3244559922b11ad5ec24920b53b92cf00000001174ac03192a169ce1403e20c@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/1479/400527950@github.com>
In-Reply-To: <quicwg/base-drafts/issues/1479@github.com>
References: <quicwg/base-drafts/issues/1479@github.com>
Subject: Re: [quicwg/base-drafts] Client's initial source CID is unauthenticated (#1479)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5b32fe317d8d6_530a3f91c9138f7c127644"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: chris-wood
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/NBDR-aTxSSfuA8rpu8W1ktlUf6I>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.26
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Jun 2018 03:02:12 -0000
> ... client's CID is never allowed to change during the handshake. Can you please point me to where this is written? If the assumption is that changing the source CID means the handshake continues indefinitely, then putting it in the TP seems to actually enforce that requirement. In general, I'd like the TP to authenticate as many things in initial packets as possible. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/quicwg/base-drafts/issues/1479#issuecomment-400527950
- Re: [quicwg/base-drafts] Client's initial source … Christopher Wood
- Re: [quicwg/base-drafts] Client's initial source … Christopher Wood
- Re: [quicwg/base-drafts] Client's initial source … Christopher Wood
- Re: [quicwg/base-drafts] Client's initial source … Kazuho Oku
- Re: [quicwg/base-drafts] Client's initial source … Christopher Wood
- Re: [quicwg/base-drafts] Client's initial source … Kazuho Oku
- Re: [quicwg/base-drafts] Client's initial source … Kazuho Oku
- Re: [quicwg/base-drafts] Client's initial source … Martin Thomson
- Re: [quicwg/base-drafts] Client's initial source … Christopher Wood
- Re: [quicwg/base-drafts] Client's initial source … Marten Seemann
- Re: [quicwg/base-drafts] Client's initial source … Nick Banks
- Re: [quicwg/base-drafts] Client's initial source … Mike Bishop
- Re: [quicwg/base-drafts] Client's initial source … Martin Thomson
- [quicwg/base-drafts] Client's initial source CID … Christopher Wood
- Re: [quicwg/base-drafts] Client's initial source … Christopher Wood
- Re: [quicwg/base-drafts] Client's initial source … MikkelFJ