Re: [quicwg/base-drafts] Add note that middleboxes might change datagram boundaries (#3337)

[Eric Kinnear <[e-mail]>]

Works for me! Will fold this in to #2925. 

How's this look for that section (otherwise this will get lost in a sea of green, new text is second half of the first sentence only): 
```
#### On-Path Handshake Termination

An on-path attacker can force the QUIC handshake to fail by replacing either the
client or server Initial messages with invalid messages or by modifying datagram
boundaries of coalesced QUIC packets, resulting in invalid Initial messages.  An
off-path attacker can also mount this attack by racing the Initials. Once valid
Initial messages have been exchanged, the remaining handshake messages are
protected with the handshake keys and an on-path attacker cannot force handshake
failure, though they can produce a handshake timeout by dropping packets.

An on-path attacker can also replace the addresses of packets on either side and
therefore cause the client or server to have an incorrect view of the remote
addresses. Such an attack is indistinguishable from the functions performed by a
NAT.
```

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3337#issuecomment-575495109