Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1])
 by ietfa.amsl.com (Postfix) with ESMTP id 91FD113101C
 for <quic-issues@ietfa.amsl.com>; Fri, 30 Nov 2018 12:40:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.46
X-Spam-Level: 
X-Spam-Status: No, score=-9.46 tagged_above=-999 required=5
 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001,
 MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001]
 autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key)
 header.d=github.com
Received: from mail.ietf.org ([4.31.198.44])
 by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 9oH33YF6ZfuB for <quic-issues@ietfa.amsl.com>;
 Fri, 30 Nov 2018 12:40:29 -0800 (PST)
Received: from out-5.smtp.github.com (out-5.smtp.github.com [192.30.252.196])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by ietfa.amsl.com (Postfix) with ESMTPS id 4A188131024
 for <quic-issues@ietf.org>; Fri, 30 Nov 2018 12:40:29 -0800 (PST)
Date: Fri, 30 Nov 2018 12:40:27 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com;
 s=pf2014; t=1543610427;
 bh=o8K1PXviW/rjtbvfxlK62j7wwV5hmlmGkH0kDgamBa4=;
 h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID:
 List-Archive:List-Post:List-Unsubscribe:From;
 b=j1GmVm4sKwO5lpuv4rkUtngx/QNVpz1WEVWuJ5hiwKMpt4nFuw6CpO65p2/gJjAB6
 mrlrfeCNYF+7A+54Pq83BvAIWmRrCr9jZRwHRY+y/h1EPOoDQeT5QpqZ89bkotg/X6
 lXQ3hCmb54JLbblZCqColDK71A5H1PlGR8zxXMV8=
From: Nick Banks <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4ab31c45bf241ce91de11468e1bc4c061ea8204309992cf000000011819623b92a169ce0fa150f9@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/816/443332763@github.com>
In-Reply-To: <quicwg/base-drafts/issues/816@github.com>
References: <quicwg/base-drafts/issues/816@github.com>
Subject: Re: [quicwg/base-drafts] Version Negotiation when Version = 0 (#816)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5c01a03be5f84_1f283fbc76cd45c02851dc";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: nibanks
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/q9la-dDxyKMQRQ_xciskyDhSnIo>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG
 <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>,
 <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>,
 <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Nov 2018 20:40:39 -0000


----==_mimepart_5c01a03be5f84_1f283fbc76cd45c02851dc
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

I'd like to reopen this issue, because if two servers support enough versions to produce really large VN packets, then an attacker could get them to continually send VN back and forth. So I think a server should silently drop a version 0 packet that it receives.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/816#issuecomment-443332763
----==_mimepart_5c01a03be5f84_1f283fbc76cd45c02851dc
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p>I'd like to reopen this issue, because if two servers support enough versions to produce really large VN packets, then an attacker could get them to continually send VN back and forth. So I think a server should silently drop a version 0 packet that it receives.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/quicwg/base-drafts/issues/816#issuecomment-443332763">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AWbkq4KTBBOYkEN8qhPQlmQayknnIQcfks5u0Ze7gaJpZM4PrQnA">mute the thread</a>.<img src="https://github.com/notifications/beacon/AWbkqzPO90TlY9ueiAawGfYqNsRG9oaNks5u0Ze7gaJpZM4PrQnA.gif" height="1" width="1" alt="" /></p>
<script type="application/json" data-scope="inboxmarkup">{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"https://assets-cdn.github.com/images/email/message_cards/header.png","avatar_image_url":"https://assets-cdn.github.com/images/email/message_cards/avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/quicwg/base-drafts"}},"updates":{"snippets":[{"icon":"PERSON","message":"@nibanks in #816: I'd like to reopen this issue, because if two servers support enough versions to produce really large VN packets, then an attacker could get them to continually send VN back and forth. So I think a server should silently drop a version 0 packet that it receives."}],"action":{"name":"View Issue","url":"https://github.com/quicwg/base-drafts/issues/816#issuecomment-443332763"}}}</script>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/issues/816#issuecomment-443332763",
"url": "https://github.com/quicwg/base-drafts/issues/816#issuecomment-443332763",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
},
{
"@type": "MessageCard",
"@context": "http://schema.org/extensions",
"hideOriginalBody": "false",
"originator": "AF6C5A86-E920-430C-9C59-A73278B5EFEB",
"title": "Re: [quicwg/base-drafts] Version Negotiation when Version = 0 (#816)",
"sections": [
{
"text": "",
"activityTitle": "**Nick Banks**",
"activityImage": "https://assets-cdn.github.com/images/email/message_cards/avatar.png",
"activitySubtitle": "@nibanks",
"facts": [

]
}
],
"potentialAction": [
{
"name": "Add a comment",
"@type": "ActionCard",
"inputs": [
{
"isMultiLine": true,
"@type": "TextInput",
"id": "IssueComment",
"isRequired": false
}
],
"actions": [
{
"name": "Comment",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"IssueComment\",\n\"repositoryFullName\": \"quicwg/base-drafts\",\n\"issueId\": 816,\n\"IssueComment\": \"{{IssueComment.value}}\"\n}"
}
]
},
{
"targets": [
{
"os": "default",
"uri": "https://github.com/quicwg/base-drafts/issues/816#issuecomment-443332763"
}
],
"@type": "OpenUri",
"name": "View on GitHub"
},
{
"name": "Unsubscribe",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"MuteNotification\",\n\"threadId\": 262998464\n}"
}
],
"themeColor": "26292E"
}
]</script>
----==_mimepart_5c01a03be5f84_1f283fbc76cd45c02851dc--