Date: Fri, 01 Feb 2019 04:32:22 -0800
From: Kazuho Oku <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4ab0146c9c29a94ab54fb4dceab7d5e4f481b1254d992cf00000001186bfe5692a169ce1823c7c2@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/2394/459708299@github.com>
In-Reply-To: <quicwg/base-drafts/issues/2394@github.com>
References: <quicwg/base-drafts/issues/2394@github.com>
Subject: Re: [quicwg/base-drafts] Spoofed retry token attack on IP
 authentication (#2394)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5c543c56eff04_503a3fe6168d45b498077";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/SEA_Qlgfl2U4lm62sSmBJaUAgtI>


----==_mimepart_5c543c56eff04_503a3fe6168d45b498077
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

> to add to the vulnerably section that a server SHOULD/MUST not grant privileged access based on the clients IP address verified by a Retry token since on-path devices and also path observing devices can race a Retry packet with a spoofed IP address.

I disagree, because a node that can receive packets going to address X and that can also send a packet that states to originate from X can initiate a new connection by itself.

For such a node, there is no need to piggyback on an Initial sent by the true owner of address X.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2394#issuecomment-459708299
----==_mimepart_5c543c56eff04_503a3fe6168d45b498077
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<blockquote>
<p>to add to the vulnerably section that a server SHOULD/MUST not grant p=
rivileged access based on the clients IP address verified by a Retry toke=
n since on-path devices and also path observing devices can race a Retry =
packet with a spoofed IP address.</p>
</blockquote>
<p>I disagree, because a node that can receive packets going to address X=
 and that can also send a packet that states to originate from X can init=
iate a new connection by itself.</p>
<p>For such a node, there is no need to piggyback on an Initial sent by t=
he true owner of address X.</p>

<p style=3D"font-size:small;-webkit-text-size-adjust:none;color:#666;">&m=
dash;<br />You are receiving this because you are subscribed to this thre=
ad.<br />Reply to this email directly, <a href=3D"https://github.com/quic=
wg/base-drafts/issues/2394#issuecomment-459708299">view it on GitHub</a>,=
 or <a href=3D"https://github.com/notifications/unsubscribe-auth/AWbkq09s=
sJq7BAYTJFpANJtOjX3Khnuqks5vJDPWgaJpZM4abNcD">mute the thread</a>.<img sr=
c=3D"https://github.com/notifications/beacon/AWbkq0HIe3VqgLFgAFAxD-Jpx-7u=
L7HVks5vJDPWgaJpZM4abNcD.gif" height=3D"1" width=3D"1" alt=3D"" /></p>
<script type=3D"application/json" data-scope=3D"inboxmarkup">{"api_versio=
n":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name"=
:"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"=
quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"http=
s://github.githubassets.com/images/email/message_cards/header.png","avata=
r_image_url":"https://github.githubassets.com/images/email/message_cards/=
avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/q=
uicwg/base-drafts"}},"updates":{"snippets":[{"icon":"PERSON","message":"@=
kazuho in #2394: \u003e to add to the vulnerably section that a server SH=
OULD/MUST not grant privileged access based on the clients IP address ver=
ified by a Retry token since on-path devices and also path observing devi=
ces can race a Retry packet with a spoofed IP address.\r\n\r\nI disagree,=
 because a node that can receive packets going to address X and that can =
also send a packet that states to originate from X can initiate a new con=
nection by itself.\r\n\r\nFor such a node, there is no need to piggyback =
on an Initial sent by the true owner of address X."}],"action":{"name":"V=
iew Issue","url":"https://github.com/quicwg/base-drafts/issues/2394#issue=
comment-459708299"}}}</script>
<script type=3D"application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/issues/2394#issuecomment=
-459708299",
"url": "https://github.com/quicwg/base-drafts/issues/2394#issuecomment-45=
9708299",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>=

----==_mimepart_5c543c56eff04_503a3fe6168d45b498077--