Date: Mon, 04 Feb 2019 15:48:14 -0800
From: Martin Thomson <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4ab4de1ca5c18e3e3af9fc8e2d43ce940e52f83facd92cf000000011870913e92a169ce183ba2c6@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/2413/460459352@github.com>
In-Reply-To: <quicwg/base-drafts/issues/2413@github.com>
References: <quicwg/base-drafts/issues/2413@github.com>
Subject: Re: [quicwg/base-drafts] Mandate using a new connection ID on
 migration (#2413)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5c58cf3e959f0_768d3fcba32d45c097163";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/Si51xKY-EoVwWb3_61eSBkXw-lk>


----==_mimepart_5c58cf3e959f0_768d3fcba32d45c097163
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

Thanks for finding that @erickinnear.  That supports the change being editorial-only.

As for the perceived conflict, yeah, the text is not ideal.  I'll find some way to reword it.  Perhaps by observing that you can never run out of zero-length connection IDs.

@igorlord, allowing a peer to exhaust connection IDs to maintain linkability across migrations is an attack that I'd rather we not have.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2413#issuecomment-460459352
----==_mimepart_5c58cf3e959f0_768d3fcba32d45c097163
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<p>Thanks for finding that <a class=3D"user-mention" data-hovercard-type=3D=
"user" data-hovercard-url=3D"/hovercards?user_id=3D32474881" data-octo-cl=
ick=3D"hovercard-link-click" data-octo-dimensions=3D"link_type:self" href=
=3D"https://github.com/erickinnear">@erickinnear</a>.  That supports the =
change being editorial-only.</p>
<p>As for the perceived conflict, yeah, the text is not ideal.  I'll find=
 some way to reword it.  Perhaps by observing that you can never run out =
of zero-length connection IDs.</p>
<p><a class=3D"user-mention" data-hovercard-type=3D"user" data-hovercard-=
url=3D"/hovercards?user_id=3D25256216" data-octo-click=3D"hovercard-link-=
click" data-octo-dimensions=3D"link_type:self" href=3D"https://github.com=
/igorlord">@igorlord</a>, allowing a peer to exhaust connection IDs to ma=
intain linkability across migrations is an attack that I'd rather we not =
have.</p>

<p style=3D"font-size:small;-webkit-text-size-adjust:none;color:#666;">&m=
dash;<br />You are receiving this because you are subscribed to this thre=
ad.<br />Reply to this email directly, <a href=3D"https://github.com/quic=
wg/base-drafts/issues/2413#issuecomment-460459352">view it on GitHub</a>,=
 or <a href=3D"https://github.com/notifications/unsubscribe-auth/AWbkq2TA=
ds0J5Q88ucbKDz3HDm2MJkoKks5vKMa-gaJpZM4aiOuh">mute the thread</a>.<img sr=
c=3D"https://github.com/notifications/beacon/AWbkq8PHP5eAJ0wb5IlgJTd53ry-=
7mStks5vKMa-gaJpZM4aiOuh.gif" height=3D"1" width=3D"1" alt=3D"" /></p>
<script type=3D"application/json" data-scope=3D"inboxmarkup">{"api_versio=
n":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name"=
:"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"=
quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"http=
s://github.githubassets.com/images/email/message_cards/header.png","avata=
r_image_url":"https://github.githubassets.com/images/email/message_cards/=
avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/q=
uicwg/base-drafts"}},"updates":{"snippets":[{"icon":"PERSON","message":"@=
martinthomson in #2413: Thanks for finding that @erickinnear.  That suppo=
rts the change being editorial-only.\r\n\r\nAs for the perceived conflict=
, yeah, the text is not ideal.  I'll find some way to reword it.  Perhaps=
 by observing that you can never run out of zero-length connection IDs.\r=
\n\r\n@igorlord, allowing a peer to exhaust connection IDs to maintain li=
nkability across migrations is an attack that I'd rather we not have."}],=
"action":{"name":"View Issue","url":"https://github.com/quicwg/base-draft=
s/issues/2413#issuecomment-460459352"}}}</script>
<script type=3D"application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/issues/2413#issuecomment=
-460459352",
"url": "https://github.com/quicwg/base-drafts/issues/2413#issuecomment-46=
0459352",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>=

----==_mimepart_5c58cf3e959f0_768d3fcba32d45c097163--