Re: [quicwg/base-drafts] Add initial threat model to security considerations (#2925)

Eric Kinnear <notifications@github.com> Sat, 16 November 2019 12:50 UTC

Date: Sat, 16 Nov 2019 04:50:10 -0800
From: Eric Kinnear <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+AFTOJKZ4AHI735VPX54XIXF33URQFEVBNHHBYGSUE4@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/2925/review/317969075@github.com>
In-Reply-To: <quicwg/base-drafts/pull/2925@github.com>
References: <quicwg/base-drafts/pull/2925@github.com>
Subject: Re: [quicwg/base-drafts] Add initial threat model to security considerations (#2925)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5dcff0829797a_102d3f95078cd9687735ef"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/Q1iqNNmEA9TJtsIBqwLOLE_YrIs>

erickinnear commented on this pull request.



> +- Reorder packets
+- Drop packets
+- Split and merge datagrams along packet boundaries
+
+An on-path attacker cannot:
+
+- Modify an authenticated and encrypted portion of a packet and cause the
+ recipient to accept that packet
+
+An on-path attacker has the opportunity to modify the packets that it observes,
+however any modifications to an authenticated portion of a packet will cause it
+to be dropped by the receiving endpoint as invalid, as QUIC payloads are both
+authenticated and encrypted.
+
+In the presence of an on-path attacker, QUIC aims to provide the following
+properties.

Fixed everywhere in 70dac1d

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2925#discussion_r347090287

[quicwg/base-drafts] Add initial threat model app… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Nick Banks
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Dmitri Tikhonov
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… ianswett
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… mirjak
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Gorry Fairhurst
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Mike Bishop
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… ianswett
Re: [quicwg/base-drafts] Add initial threat model… Jana Iyengar
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Martin Thomson
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… MikkelFJ
Re: [quicwg/base-drafts] Add initial threat model… Eric Kinnear
Re: [quicwg/base-drafts] Add initial threat model… MikkelFJ