Re: [quicwg/base-drafts] Duplicates are dropped (#1624)

[Kazuho Oku <[e-mail]>]

I agree with @marten-seemann here.

If we are to add some text, I think that we should have a reference to the TLS document that states how it should be done, i.e.
> If the recipient of a packet discards packets with duplicate packet numbers without attempting to remove packet protection they could reveal through timing side-channels that the packet number matches a received packet. For authentication to be free from side-channels, the entire process of packet number protection removal, packet number recovery, and packet protection removal MUST be applied together without timing and other side-channels.
> https://quicwg.org/base-drafts/draft-ietf-quic-tls.html#rfc.section.9.3



-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/1624#issuecomment-409463893