Re: A non-TLS standard is needed

[Töma Gavrichenkov <[e-mail]>]

Peace,

On Sun, Apr 26, 2020, 9:57 PM Paul Vixie <[e-mail]> wrote:

> i was directed to the following i-d when i asked about QUIC manageability:
>
> https://tools.ietf.org/html/draft-ietf-quic-manageability-06#section-3


To be honest, and with all due respect to everyone involved, the
manageability draft wasn't properly updated for years (and the authors do
not seem to respond to emails, though this could be possibly attributed to
some sort of email filtering which is common those days).

To be specific, e.g. the section 4.4, as of today, still states that, to
quote, "current practices in detection and mitigation of Distributed Denial
of Service (DDoS) attacks generally involve passive measurement using
network flow data", which is clearly not how it works, as everyone who has
seen reCaptcha interruptions during application layer DDoS could witness.

There's certain amount of hard work required to update this document before
referencing it properly (I volunteer).


--
Töma