Re: [quicwg/base-drafts] Add Advice and Rules for CONN_CLOSE in Initial and Handshake (#1786)

[martinduke <[e-mail]>]

@ianswett Personally, I'm reluctant to cross the implicit ACK bridge. Messing with the ack and retransmission logic, at this point, could result in unforeseen consequences in the handshake. I would much rather restrict the weirdness to error cases in the just after the Initial phase, which is unlikely to be exercised often.

@kazuho I want to clarify an important distinction here. There is nothing we can do about injection attacks in the first 1.5 RTTs, and that is not the objection here. There is a further vulnerability, after handshake keys are employed, until we dispose of the keys. I am trying to close that hole without driving people to run their timers too short.

You may be right that people will do it anyway. But I'd like to spec to be consistent with best practice.

Do people think this is discussion is far enough along that they'd like to see a PR?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1786#issuecomment-425568975