Re: [quicwg/base-drafts] Recommend discarding bad, unauthentication packets (#2141)

[MikkelFJ <[e-mail]>]

mikkelfj commented on this pull request.



> @@ -1000,6 +1000,12 @@ to more quickly identify when a connection becomes unusable.
 Packets that are matched to an existing connection, but for which the endpoint
 cannot remove packet protection, are discarded.
 
+Invalid packets without packet protection, such as Initial, Retry, or Version
+Negotiation, SHOULD be discarded without altering connection state.  An endpoint

When I say can't close, I mean you should drop packets. Or close if you already affected state as the PR says - even if injection because you can no longer trust yourself - therefore you need to validate carefully before applying state, especially during handshake. You definitely shouldn't try to recover.

That said, perhaps we need to clarify exactly when we switch from dropping to closing. You need to have established a secure line of communication. Bogus TLS can be injection attacks as well as endpoint sourced nonsense.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2141#discussion_r241458778