Re: [rtcweb] #13: Transport of DATA_CHANNEL_OPEN

[Randell Jesup <[e-mail]>]

Since we send the Open reliably, barring active attempts to game the 
system with a non-browser, the Open *will* eventually get through unless 
you have 100% (or virtually so) packet loss (and in that case, nothing 
useful, including an error response, is getting through anyways).  So I 
honestly feel it's ok to just buffer all incoming packets while waiting 
for the Open.

No one is going to get a gigabyte of data in without an Open...  A 
non-browser could fake up a session and start sending data without ever 
sending an Open... but flushing the data doesn't actually help you 
against that sort of active DOS (they can just start again, they can 
spread it across thousands of channels, etc, etc), and there are FAR 
better DOS methods - all this would do is burn some CPU and some memory.

-- 
Randell Jesup
[e-mail]