[quicwg/base-drafts] Strike confusing paragraph (#3985)

Martin Thomson <notifications@github.com> Wed, 05 August 2020 05:10 UTC

Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71F143A0B38 for <quic-issues@ietfa.amsl.com>; Tue, 4 Aug 2020 22:10:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.1
X-Spam-Level:
X-Spam-Status: No, score=-3.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JCtBo-2gY3-k for <quic-issues@ietfa.amsl.com>; Tue, 4 Aug 2020 22:10:05 -0700 (PDT)
Received: from out-18.smtp.github.com (out-18.smtp.github.com [192.30.252.201]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E82E3A0B23 for <quic-issues@ietf.org>; Tue, 4 Aug 2020 22:10:05 -0700 (PDT)
Received: from github-lowworker-f045d1f.ac4-iad.github.net (github-lowworker-f045d1f.ac4-iad.github.net [10.52.19.54]) by smtp.github.com (Postfix) with ESMTP id 038A3340024 for <quic-issues@ietf.org>; Tue, 4 Aug 2020 22:10:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1596604204; bh=padxz2w8B7hfbJWEh1guJ81b5DQftxwkGN463rBwbQw=; h=Date:From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=vz3hCzxVMlvu5hhy/ZhDbx+c34x93jSfgpcZD5fWZvCkCgwHtJthMDrHv8CIGIx2+ cgBX/QYTC1abSKeYASQOBRvgPf6l2mIkG/n1w5d9UahGDuJfDS/0fFFWMcGAm7lVif e9JCuIf0+dK+ijoGtGSKmmzr1GMmGyowzuTp/hhY=
Date: Tue, 04 Aug 2020 22:10:03 -0700
From: Martin Thomson <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+AFTOJK6IAQMFK4KKNIBEZ5V5GYQCXEVBNHHCQIIZAI@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/3985@github.com>
Subject: [quicwg/base-drafts] Strike confusing paragraph (#3985)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5f2a3f2be8076_d2516f8105596"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: martinthomson
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/NTnytCbp_CnqrHV_ytE3OC77P6k>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Aug 2020 05:10:06 -0000

This text could be read to imply that an off-path attacker is more
capable than an on-path attacker, which is rarely true.  What it was
meant to point out was that it is easier to move traffic onto a path
that you are on.  What it fails to acknowledge is that it is also easier
to move traffic *off* a path that you are on.

In other words, the treatment of this in 21.12 is more thorough and we
don&#39;t need to talk about limitations.

Mike suggested that there is some duplication between this attack and
the more comprehensive analysis in 21.12.  That is true, but these serve
different purposes.  This is to describe attacks and the normative
requirements on endpoints necessary to avoid them.  The other section is
a thorough and hollistic analysis.  I couldn&#39;t see any truly
straightforward changes.  That doesn&#39;t mean that we won&#39;t find a way to
clean this up, or that it would be undesirable to have fewer words, but
I&#39;ve not the time for that right now.

Closes #3841.
You can view, comment on, or merge this pull request online at:

  https://github.com/quicwg/base-drafts/pull/3985

-- Commit Summary --

  * Strike confusing paragraph

-- File Changes --

    M draft-ietf-quic-transport.md (3)

-- Patch Links --

https://github.com/quicwg/base-drafts/pull/3985.patch
https://github.com/quicwg/base-drafts/pull/3985.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3985