Re: [quicwg/base-drafts] Auth48 fixes for QPACK (PR #4986)

Mike Bishop <notifications@github.com> Tue, 26 April 2022 18:12 UTC

Date: Tue, 26 Apr 2022 11:11:46 -0700
From: Mike Bishop <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+AFTOJK4QKVUM56JEHMIWOFOAOVUGFEVBNHHEQ73GEU@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/4986/review/953814265@github.com>
In-Reply-To: <quicwg/base-drafts/pull/4986@github.com>
References: <quicwg/base-drafts/pull/4986@github.com>
Subject: Re: [quicwg/base-drafts] Auth48 fixes for QPACK (PR #4986)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_626835e28f735_685dd41c1852c2"; charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/TF16CFZHJUJL9nI0mmEK3RQ1NI4>

@MikeBishop commented on this pull request.



> +For clients not using 0-RTT data (whether 0-RTT is not attempted or is rejected)
+and for all HTTP/3 servers, the maximum table capacity is 0 until the encoder
+processes a SETTINGS frame with a non-zero value of
+SETTINGS_QPACK_MAX_TABLE_CAPACITY.

By parallel with the previous paragraph's first sentence.

> +<aside><t>
+Note: Padding schemes only provide limited protection against an attacker with
+these capabilities, potentially only forcing an increased number of guesses to
+learn the length associated with a given guess. Padding schemes also work
+directly against compression by increasing the number of bits that are
+transmitted.
+</t></aside>

I couldn't find a kramdown way to do this, so I just inlined the XML.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/4986#pullrequestreview-953814265
You are receiving this because you are subscribed to this thread.

Message ID: <quicwg/base-drafts/pull/4986/review/953814265@github.com>

Re: [quicwg/base-drafts] Auth48 fixes for QPACK (… Mike Bishop