IETF Logo Mail Archive

[quicwg/base-drafts] Protection against abusive packet numbers (#1751)

MikkelFJ <notifications@github.com> Sun, 16 September 2018 09:06 UTC

Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51209130DF9 for <quic-issues@ietfa.amsl.com>; Sun, 16 Sep 2018 02:06:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8
X-Spam-Level:
X-Spam-Status: No, score=-8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jCmKVhULR-hN for <quic-issues@ietfa.amsl.com>; Sun, 16 Sep 2018 02:06:02 -0700 (PDT)
Received: from out-6.smtp.github.com (out-6.smtp.github.com [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90264130DF7 for <quic-issues@ietf.org>; Sun, 16 Sep 2018 02:06:02 -0700 (PDT)
Date: Sun, 16 Sep 2018 02:06:00 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1537088760; bh=0pwcxvzIOmHc+4u/CNilefyh5xi9OfjUuIYerOQ+d3c=; h=Date:From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=pbHeecTxaiyswEtc6iA5EHHqJDquUvCasAbfvOZRweXhloSdKadWan/myZZlRZYtO n1tw7LMujsL4gVTD4376Kru0BQ54XK5axrszrf7g5kBOFzSh7EEBsyShYtXONEVqEM IHrdaolXUFIOP3ZAt8SifCWiPFRnOwfrdWLcsRi0=
From: MikkelFJ <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+0166e4ab44d8e3bd745dbb660aa3f85d47a5e852a54b138392cf0000000117b5def892a169ce157e9f83@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/1751@github.com>
Subject: [quicwg/base-drafts] Protection against abusive packet numbers (#1751)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5b9e1cf8b0c88_72393fc7a5cd45b84229bb"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: mikkelfj
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/Y_eakCZuvvvlfZDI7_MndT-uq84>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 16 Sep 2018 09:06:07 -0000

There is no easy way for a peer to decided when there are too many packets lost based on the packet numbers - even if the criteria is deployment specific.

The sender does not need to introduce large gaps and by enforcing that, the peer can make an informed decision on the packet number range.

There is also no error to disconnect due to suspected abuse. A too large packet number gap could be for valid reasons, even if the loss is too high to proceed. A new error that can deal with both these conditions would be useful.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1751

v2.46.0 | Report a Bug | By Email | System Status