Date: Tue, 20 Jun 2017 16:03:34 -0700
From: Martin Thomson <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4abe97cb2bdeda29c8a591189cf2974b3120a89f9e292cf0000000115616bc692a169ce0e25f808@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/645@github.com>
Subject: [quicwg/base-drafts] What compromises do we take during the handshake
 (#645)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5949a9c620b8a_e4743f974d63fc30804e9";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/Uwiu_wOulOLAba0CcDkPwhemkb8>

----==_mimepart_5949a9c620b8a_e4743f974d63fc30804e9
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

We need to decide what guarantees we will assume prior to establishing common keys.  This touches on things like

* whether we want to abort the connection in response to spoofed packets, or whether we can ignore them
* how the client does source address validation for the server
* whether the connection ID needs to be stable during the handshake or whether the 5-tuple is enough

This covers #624, #594, #554, and likely other issues.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/645
----==_mimepart_5949a9c620b8a_e4743f974d63fc30804e9
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p>We need to decide what guarantees we will assume prior to establishing common keys.  This touches on things like</p>
<ul>
<li>whether we want to abort the connection in response to spoofed packets, or whether we can ignore them</li>
<li>how the client does source address validation for the server</li>
<li>whether the connection ID needs to be stable during the handshake or whether the 5-tuple is enough</li>
</ul>
<p>This covers <a href="https://github.com/quicwg/base-drafts/issues/624" class="issue-link js-issue-link" data-url="https://github.com/quicwg/base-drafts/issues/624" data-id="235078830" data-error-text="Failed to load issue title" data-permission-text="Issue title is private">#624</a>, <a href="https://github.com/quicwg/base-drafts/issues/594" class="issue-link js-issue-link" data-url="https://github.com/quicwg/base-drafts/issues/594" data-id="233878968" data-error-text="Failed to load issue title" data-permission-text="Issue title is private">#594</a>, <a href="https://github.com/quicwg/base-drafts/issues/554" class="issue-link js-issue-link" data-url="https://github.com/quicwg/base-drafts/issues/554" data-id="230561013" data-error-text="Failed to load issue title" data-permission-text="Issue title is private">#554</a>, and likely other issues.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/quicwg/base-drafts/issues/645">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AWbkq7KHdVxHUz9KJ1nsKeouCiNEEx9Lks5sGE_GgaJpZM4OAQqM">mute the thread</a>.<img alt="" height="1" src="https://github.com/notifications/beacon/AWbkq8S8olG11WlwKYlJopuZO_jjAX4zks5sGE_GgaJpZM4OAQqM.gif" width="1" /></p>
<div itemscope itemtype="http://schema.org/EmailMessage">
<div itemprop="action" itemscope itemtype="http://schema.org/ViewAction">
  <link itemprop="url" href="https://github.com/quicwg/base-drafts/issues/645"></link>
  <meta itemprop="name" content="View Issue"></meta>
</div>
<meta itemprop="description" content="View this Issue on GitHub"></meta>
</div>

<script type="application/json" data-scope="inboxmarkup">{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"https://cloud.githubusercontent.com/assets/143418/17495839/a5054eac-5d88-11e6-95fc-7290892c7bb5.png","avatar_image_url":"https://cloud.githubusercontent.com/assets/143418/15842166/7c72db34-2c0b-11e6-9aed-b52498112777.png","action":{"name":"Open in GitHub","url":"https://github.com/quicwg/base-drafts"}},"updates":{"snippets":[{"icon":"DESCRIPTION","message":"What compromises do we take during the handshake (#645)"}],"action":{"name":"View Issue","url":"https://github.com/quicwg/base-drafts/issues/645"}}}</script>
----==_mimepart_5949a9c620b8a_e4743f974d63fc30804e9--