Re: [quicwg/base-drafts] Can Finished be sent as 1-RTT data? (#785)

[ekr <[e-mail]>]

Note that there are cryptographic reasons for using different keys. This
was one of the big reasons for the TLS 1.3 key schedule being the way it
is. So I'd really much rather have it be in Client Clear Text.

On Wed, Sep 20, 2017 at 9:44 AM, Christian Huitema <[e-mail]
> wrote:

> I know that in TLS 1.3, the answer is no. But the TLS answer applies to
> TLS over TCP, for which TLS manages the transition from handshake data to
> application data. QUIC is arguably different. The stream zero frame will
> carry the Finished message as an encrypted handshake message. But the spec
> is a bit ambiguous as to whether this stream zero frame shall be carried as
> "Client Clear Text" or "1-RTT Data".
>
> I would much prefer 1-RTT data, because of repetition handling. If we
> imposed Client Clear Text, and the packet is lost, the stream zero frame
> will have to be retransmitted again as client clear text. That means
> interleaving clear text data and encrypted data within a single set of
> sequence number, and I am convinced that that can be abused to carry some
> kind of denial of service.
>
> —
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly, view it on GitHub
> <https://github.com/quicwg/base-drafts/issues/785>, or mute the thread
> <https://github.com/notifications/unsubscribe-auth/ABD1oT5HMe2FR9zNWo44cYAme93ZWPjDks5skUDRgaJpZM4PeKN8>
> .
>


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/785#issuecomment-330922993