IETF Logo Mail Archive

Re: [quicwg/base-drafts] Be more conservative about migration? (#2143)

MikkelFJ <notifications@github.com> Thu, 13 December 2018 14:45 UTC

Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFF8B126F72 for <quic-issues@ietfa.amsl.com>; Thu, 13 Dec 2018 06:45:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.459
X-Spam-Level:
X-Spam-Status: No, score=-9.459 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_32=0.001, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GV3XEMbIjDp0 for <quic-issues@ietfa.amsl.com>; Thu, 13 Dec 2018 06:45:38 -0800 (PST)
Received: from out-5.smtp.github.com (out-5.smtp.github.com [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1138B124408 for <quic-issues@ietf.org>; Thu, 13 Dec 2018 06:45:38 -0800 (PST)
Date: Thu, 13 Dec 2018 06:45:36 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1544712336; bh=zY8YW6a3tpA5wrTYbuxVheOsHUd6Neo10dmRDnDjI/o=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=CWwtgg7dxXGvC04pBXP9psolI0X2ZV6jyezLlcqNIRMZupu3vUB0QOEEAnR9qNbUi 3MVMX5/twJfakSfgGv041FyvK7py/YXjsXSBDGnejucQ5io9D/QdlrdOG/U6DFfYfr fZ5MbgN2FlwNykLmpjKKifp1hUfstneMVqzDdK/c=
From: MikkelFJ <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+0166e4ab42af5d8f2d5706d81b4cc0a6f80aa5605d84b0d592cf00000001182a329092a169ce17495be9@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/2143/446993259@github.com>
In-Reply-To: <quicwg/base-drafts/issues/2143@github.com>
References: <quicwg/base-drafts/issues/2143@github.com>
Subject: Re: [quicwg/base-drafts] Be more conservative about migration? (#2143)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5c127090babca_5eef3f8b80ad45bc247ee"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: mikkelfj
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/Xxv8ooaR3IzYVAwT-Al7go4jq9A>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Dec 2018 14:45:41 -0000

To prevent a race from being successful the probe needs to checksum the visible address and have that checksum be reflected back by the client rather than just ACK'ing the probe. Once the reflected checksum is seen the path must be valid.

For true on path, the attacker can drop packets from client to server to maintain the illusion of a different client address, but then the probe will never be reflected correctly. It will eventually time out.

BTW: the description on notation is confusing, mixing [A:B] with [X:Y] and sometimes having Z as payload and sometimes as an address.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2143#issuecomment-446993259

v2.23.0 | Report a Bug | By Email