Re: [quicwg/base-drafts] Don't haphazardly suggest retrying over TCP (#290)

[hardie <[e-mail]>]

I understand why we don't want to recommend a specific fallback, but there's an implication here we may want to keep.  If you want to use QUIC with a fallback, that fallback should have roughly equivalent security properties or blocking QUIC is a downgrade attack.  So the DNS example might be falling back to DNS over DTLS, but it would *not* be falling back to plaintext UDP.  That may be better expressed in a document about which protocols could theoretically adopt QUIC than here, but I don't want to lose it entirely.

Note that I'm assuming here silent fallback, where the user is never told which protocols are in use under the hood.  I'm sure there are other choices for when the user is looped in, but I don't think those are QUIC's business.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/290#issuecomment-280149860