Re: [quicwg/base-drafts] Construction of address validation token (#2587)
Erik Sy <notifications@github.com> Tue, 09 April 2019 19:47 UTC
Return-Path: <bounces+848413-a050-quic-issues=ietf.org@sgmail.github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCDE5120236 for <quic-issues@ietfa.amsl.com>; Tue, 9 Apr 2019 12:47:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.001
X-Spam-Level:
X-Spam-Status: No, score=-3.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fWYhRl4CZZij for <quic-issues@ietfa.amsl.com>; Tue, 9 Apr 2019 12:47:12 -0700 (PDT)
Received: from o10.sgmail.github.com (o10.sgmail.github.com [167.89.101.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91B9612016A for <quic-issues@ietf.org>; Tue, 9 Apr 2019 12:47:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=github.com; h=from:reply-to:to:cc:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding:list-id:list-archive:list-post:list-unsubscribe; s=s20150108; bh=aak7x62MlOl9avzIoIw0YQDlVNU=; b=vPdCuSk2dkXoxquv bRvW4yWJ8mldaAeb87GDUlXhSlfkiOwghNA7JAXpuLhjA6Z82bCkESoEAcA/gubD /LcHWPs8HOySpB4RnQ0UMM7hV6rvbBXmssgv+/VnJiMRQeITypxi+F6VZrfTdOrv dTRnl3hBYzIRIZ0EvWXGSK6o/J4=
Received: by filter1477p1mdw1.sendgrid.net with SMTP id filter1477p1mdw1-21654-5CACF6BE-18 2019-04-09 19:47:10.71884813 +0000 UTC m=+70625.936400173
Received: from github-lowworker-39ccb07.cp1-iad.github.net (unknown [192.30.252.40]) by ismtpd0024p1iad2.sendgrid.net (SG) with ESMTP id kA3pPEHHRyK84mJSBU8wyw for <quic-issues@ietf.org>; Tue, 09 Apr 2019 19:47:10.565 +0000 (UTC)
Received: from github.com (localhost [127.0.0.1]) by github-lowworker-39ccb07.cp1-iad.github.net (Postfix) with ESMTP id 9F432400BD2 for <quic-issues@ietf.org>; Tue, 9 Apr 2019 12:47:10 -0700 (PDT)
Date: Tue, 09 Apr 2019 19:47:10 +0000
From: Erik Sy <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+0166e4ab199335e221f8718813318468a0d56088c158c38592cebaba293e92a169ce198dbfea@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/2587/481407927@github.com>
In-Reply-To: <quicwg/base-drafts/issues/2587@github.com>
References: <quicwg/base-drafts/issues/2587@github.com>
Subject: Re: [quicwg/base-drafts] Construction of address validation token (#2587)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5cacf6be9d8cf_78aa3feff80d45bc183258"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: kirsey
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
X-SG-EID: l64QuQ2uJCcEyUykJbxN122A6QRmEpucztpreh3Pak3GqA+GxC1M10fD8UzinnwrVbCF5W3xKjwYom tmCQMlPsQyyqq2J4lpMULhYP7aCG/lMaumLVgqjt7+uGzfQN1lJFKUg2PwA/oq5owZprhcr34cK5ju TvcZszlj5sdhTn4w/fPzGXOrIllDZjpt+DAVllKfY6cAXvnrLysooS/mAw==
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/R8jiiYr3v_s0O_wpWflg8Tho7Cc>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Apr 2019 19:47:15 -0000
No, #2543 does not cover this particular point. #2543 makes the point that a network observer should not be able to derive information such as a timestamp from observed tokens. However, this issue says that the construction of the token should not be deterministic. To illustrate this problem, assume that the token is more or less the hash of the client's source address. Thus, the client receives upon repeat connections the each time the same token, if its source address is identical. As a result, even if the client uses each token only a single time the corresponding connections established with these tokens can be correlated to each other by a network observer. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/quicwg/base-drafts/issues/2587#issuecomment-481407927
- [quicwg/base-drafts] Construction of address vali… Erik Sy
- Re: [quicwg/base-drafts] Construction of address … Kazuho Oku
- Re: [quicwg/base-drafts] Construction of address … Lars Eggert
- Re: [quicwg/base-drafts] Construction of address … Kazuho Oku
- Re: [quicwg/base-drafts] Construction of address … Lars Eggert
- Re: [quicwg/base-drafts] Construction of address … Erik Sy
- Re: [quicwg/base-drafts] Construction of address … Lars Eggert
- Re: [quicwg/base-drafts] Construction of address … Erik Sy
- Re: [quicwg/base-drafts] Construction of address … Erik Sy
- Re: [quicwg/base-drafts] Construction of address … Lars Eggert