IETF Logo Mail Archive

Re: [quicwg/base-drafts] Complete version negotiation failure (#1917)

MikkelFJ <notifications@github.com> Wed, 07 November 2018 10:33 UTC

Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0211129BBF for <quic-issues@ietfa.amsl.com>; Wed, 7 Nov 2018 02:33:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.47
X-Spam-Level:
X-Spam-Status: No, score=-8.47 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y9vh0gx2Cdh3 for <quic-issues@ietfa.amsl.com>; Wed, 7 Nov 2018 02:33:28 -0800 (PST)
Received: from out-5.smtp.github.com (out-5.smtp.github.com [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D2FD129619 for <quic-issues@ietf.org>; Wed, 7 Nov 2018 02:33:28 -0800 (PST)
Date: Wed, 07 Nov 2018 02:33:27 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1541586807; bh=C7PJLnOfQBultu8ShEwCZ7qgu0U952kvyoYFwnlqPH8=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=xkcuZsP7A9fKUpsjMr263Xl2CRLUhh+lHhqsKzcjbmWsnxVfoqPQ637rlTrX/tBcN fJDq5VMi7dyHOygB9PWCrUQpvOGpm4yXBRSP2EantDitPJz9AIaPIUwj8s50YtGcv0 SxTDOOUji2nM5VughNybzyOTdAqcW3cvKHq9mC5M=
From: MikkelFJ <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+0166e4abcbafd81715dbd8d8e51fd63c11da2c2a6fdfd25992cf0000000117fa817792a169ce164cac4a@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/1917/436579373@github.com>
In-Reply-To: <quicwg/base-drafts/issues/1917@github.com>
References: <quicwg/base-drafts/issues/1917@github.com>
Subject: Re: [quicwg/base-drafts] Complete version negotiation failure (#1917)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5be2bf77ac796_2d183fdf05cd45b410245f"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: mikkelfj
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/xYsyNUJRjBm0UxfLf6qF6U691MM>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Nov 2018 10:33:30 -0000

@igorlord There are definitely many more scenarios better handled in v2 or which are not practical to defend against at all without out of band knowledge such as signatures of some sort.

As to a VN with initial version, the draft already says:

> A client MUST ignore a Version Negotiation packet that lists the client’s chosen version.

However "waiting a little" will give a valid packet a fighting chance against subversive attackers that wish to remain undetected.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1917#issuecomment-436579373

v2.40.4 | Report a Bug | By Email | System Status