[quicwg/base-drafts] secdir review of -qpack; issue 3 (#4401)

Lars Eggert <notifications@github.com> Fri, 20 November 2020 09:23 UTC

Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 415233A1AF8 for <quic-issues@ietfa.amsl.com>; Fri, 20 Nov 2020 01:23:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.554
X-Spam-Level:
X-Spam-Status: No, score=-1.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oIrLLsSERahE for <quic-issues@ietfa.amsl.com>; Fri, 20 Nov 2020 01:23:20 -0800 (PST)
Received: from smtp.github.com (out-21.smtp.github.com [192.30.252.204]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 622643A1AF6 for <quic-issues@ietf.org>; Fri, 20 Nov 2020 01:23:20 -0800 (PST)
Received: from github.com (hubbernetes-node-745b050.ac4-iad.github.net [10.52.102.15]) by smtp.github.com (Postfix) with ESMTPA id 99DD6520B84 for <quic-issues@ietf.org>; Fri, 20 Nov 2020 01:23:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1605864199; bh=sSOHi9W3pNmKUyqrlMbxZnwASeLcDzOknT0LF4mkX3Y=; h=Date:From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=SpFL5UeoCoXa7z5JkkOYAuBrFFXRsP/PiJaSd+y3/Y7BAFE/DNeMSI+VD2ML2ZVqA yOOPOWgdoGBdMvFjiAYjx0PpdHi7UPbDkY7ajGtR8syT1/GKUjpGyXslEz9J6B6yjv fYYS/Qln3ZTok12SIFQZlpYLxqtp0+vr6gFEQZ1g=
Date: Fri, 20 Nov 2020 01:23:19 -0800
From: Lars Eggert <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+AFTOJK5QMTHMBKPUZNNTXXV5YNWAPEVBNHHCZC2LBY@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/4401@github.com>
Subject: [quicwg/base-drafts] secdir review of -qpack; issue 3 (#4401)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5fb78b078f467_4c19b4685f2"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: larseggert
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/ozPNlIxiylm_1qwoH9M0i-U7XPs>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Nov 2020 09:23:22 -0000

Magnus Nystrom [wrote](https://datatracker.ietf.org/doc/review-ietf-quic-qpack-19-secdir-lc-nystrom-2020-11-19/):
> - For Section 7.5, is it intended to communicate that an attacker will
   not be able (based on no current known attack against static Huffman
   encodings) to mount the previously described "probing" attack? If so,
   adding a sentence at the end of the section along the lines of "Thus, the
   previously mentioned probing attack is not known to be applicable for any
   fields where static Huffman encoding is used."


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/4401