Re: [quicwg/base-drafts] Add Advice and Rules for CONN_CLOSE in Initial and Handshake (#1786)

[Kazuho Oku <[e-mail]>]

> Well, the specs says that you MUST terminate the connection. You can't countermeasure that without not being QUIC.

You cannot process packets once you drop the keys, meaning that you would never see the CONNECTION_CLOSE packet, or anything else that might disrupt the handshake. Therefore, what an endpoint that is cautious of detecting attacks should do is drop the Initial key at the earliest moment. I simply do not see why we need to handle CONNECTION_CLOSE differently than other frames that we might see in a Initial packet that arrives at a later moment.

And in regard to the philosophical question of if ignoring a Initial packet that you detected and found a CONNECTION_CLOSE frame is against the spec., my argument would be that stacks are allowed to do whatever they want in these circumstances. In my view, it is the same as having a packet filter that drops suspicious TCP packets.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1786#issuecomment-425377046