[quicwg/base-drafts] Ben Kaduk's QPACK Comment 2 (#4792)

[Lucas Pardue <[e-mail]>]

@kaduk said

> Section 7.1.2
>
> The mitigation technique of segregating the dynamic table by entity
> constructing the message seems to inherently require the encoder to have
> direct knowledge of the entity on whose behalf it is constructing a
> message.  For the other mitigation technique we present (of always using
> string literals for sensitive values), we include the 'N' bit to allow
> this attribute to be propagated through intermediaries.  However, I
> think that in scenarios where multiple intermediaries are involved, in
> the later steps in the intermediary chain the encoder will not
> necessarily have knowledge of which entity created a given message, and
> thus could inadvertently merge compression contexts that the original
> encoder had specifically kept separate.  The preconditions necessary for
> this to enable an attack seem rare, with one of the originating entities
> having access to observe the transport layer in a location several hops
> removed, so it doesn't really seem worth attempting to add a technical
> mitigation.  It would probably be worth documenting the risk, though.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/4792