Re: [quicwg/base-drafts] Disconnect with Initial Injection (#1951)

[Kazuho Oku <[e-mail]>]

I agree that dropping at per-frame basis is more fragile than dropping keys. However, it has the following benefits:
* The rule to evade attacks before the Handshake keys are exchanged. Specifically, ignoring unexpected PNs in ACK is a nice-to-have for #2076.
* The rules are easier to implement than what we have now in #2053, because the rules can be applied in one-path, rather than in two-pass (i.e. first check that the frames are valid then apply all of them).

To put it another way, per-frame rules is something easy to implement, and also is beneficial to evade attacks during the exchange of Initials. And if we use the framework also for ignoring CRYTO frames once the Handshake key is obtained, dropping the Initial keys become unnecessary.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1951#issuecomment-443073733