Subject: [quicwg/base-drafts] cdbfb6: Additional security section on fragmentation reass...

From: Martin Thomson <[email-masked]>
Date: Sun, 23 Apr 2017 18:28:08 -0700

Branch: refs/heads/master
  Home:   https://github.com/quicwg/base-drafts
  Commit: cdbfb64a6e93361d3d0cdb709578dc231e138f2f
      https://github.com/quicwg/base-drafts/commit/cdbfb64a6e93361d3d0cdb709578dc231e138f2f
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Additional security section on fragmentation reassembly attacks

Describe the equivalent of the Teardrop attack for QUIC, and propose mitigation.

  Commit: c4cad2fcbcf1cd8dbd95bbb45485e4cae18748e9
      https://github.com/quicwg/base-drafts/commit/c4cad2fcbcf1cd8dbd95bbb45485e4cae18748e9
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Adding a description of stream commitment attacks in security section

See discussion of issue #435: Stream ID sequential order may create head of queue blocking.

  Commit: 12dd1f54f9f043c8700991d8d61ef24ac4ba8a02
      https://github.com/quicwg/base-drafts/commit/12dd1f54f9f043c8700991d8d61ef24ac4ba8a02
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Update draft-ietf-quic-transport.md

  Commit: dade254760334723363773208743522fd1ab813d
      https://github.com/quicwg/base-drafts/commit/dade254760334723363773208743522fd1ab813d
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Update draft-ietf-quic-transport.md

  Commit: 464a222e9dda89d2b06d7e46be3fcea980c9bc3b
      https://github.com/quicwg/base-drafts/commit/464a222e9dda89d2b06d7e46be3fcea980c9bc3b
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Splitting long lines so the verification does not complains so much.

80 char limit. Seriously?

  Commit: ddefb663dbeb16701bcf6181ae5176a5b52bf1ad
      https://github.com/quicwg/base-drafts/commit/ddefb663dbeb16701bcf6181ae5176a5b52bf1ad
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Log Message:
  -----------
  Removing a trailing white space. 

Because that's what the check in control says.
draft-ietf-quic-transport.md contains trailing whitespace
make: *** [latest] Error 1
Whatever...

  Commit: 105e26eb0563364010052ad46a62418ecbf8c9c3
      https://github.com/quicwg/base-drafts/commit/105e26eb0563364010052ad46a62418ecbf8c9c3
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Remove the trailing white space???

Some of my input lines ended with a space. Apparently, that's enough to spook the verifier. Weird.

  Commit: 6a0337c7771fd8787dc42dc58d6adb151f00cc24
      https://github.com/quicwg/base-drafts/commit/6a0337c7771fd8787dc42dc58d6adb151f00cc24
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Removing trailing spaces on some of changed lines

I have lots of emotional things to say about such checks...

  Commit: 693758bd94e549cd4895de8b511fca9a843a0d85
      https://github.com/quicwg/base-drafts/commit/693758bd94e549cd4895de8b511fca9a843a0d85
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Shortening the text, per Martin Thomson's review

  Commit: a169a171d79ae43ded2b4a237b6996938b59ac13
      https://github.com/quicwg/base-drafts/commit/a169a171d79ae43ded2b4a237b6996938b59ac13
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Trailing white spaces. This check is heinous.

  Commit: d2444849b79176f61c79771c66677bec28108d95
      https://github.com/quicwg/base-drafts/commit/d2444849b79176f61c79771c66677bec28108d95
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Simplifying the text, per Martin's review

  Commit: 48f580ccbc19fa900c43e37eb065c20999abb2f0
      https://github.com/quicwg/base-drafts/commit/48f580ccbc19fa900c43e37eb065c20999abb2f0
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Update draft-ietf-quic-transport.md

  Commit: dec12c295c05a6e180f5d494c2f42b1665f0cba5
      https://github.com/quicwg/base-drafts/commit/dec12c295c05a6e180f5d494c2f42b1665f0cba5
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  fixing the slowloris reference.

  Commit: bfd754a4883ad53a9edd2688f080fdc3ca245050
      https://github.com/quicwg/base-drafts/commit/bfd754a4883ad53a9edd2688f080fdc3ca245050
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Strengthen the SHOULD mitigate text

Also, fix the line>80 characters, so we can easily transfer the MD file to punch cards.

  Commit: f725b84c8cd3d989ae28c8bd8a1d3ccfc44cf834
      https://github.com/quicwg/base-drafts/commit/f725b84c8cd3d989ae28c8bd8a1d3ccfc44cf834
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  More punch cards.

  Commit: dbdcad821c05f728db4ea434dd0e3d261ed2cb5b
      https://github.com/quicwg/base-drafts/commit/dbdcad821c05f728db4ea434dd0e3d261ed2cb5b
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  I thought I was done with punch cards 40 years ago.

  Commit: 0eeb693b59ac0a55c4224063f2bb9b2d5d197449
      https://github.com/quicwg/base-drafts/commit/0eeb693b59ac0a55c4224063f2bb9b2d5d197449
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  trailing white space.

The 70's are back with a vengeance.

  Commit: 6aa8d9ea2cbfc552f39cb3f6a43994ab08891522
      https://github.com/quicwg/base-drafts/commit/6aa8d9ea2cbfc552f39cb3f6a43994ab08891522
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  whatever.

  Commit: 9dbba1032099ede1727e9bdb5907a4c686eb1a51
      https://github.com/quicwg/base-drafts/commit/9dbba1032099ede1727e9bdb5907a4c686eb1a51
  Author: huitema <[email-masked]>
  Date:   2017-04-19 (Wed, 19 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Punch me.

  Commit: 46f293cbc6dda6059e8e26e17c4a9bf304590637
      https://github.com/quicwg/base-drafts/commit/46f293cbc6dda6059e8e26e17c4a9bf304590637
  Author: huitema <[email-masked]>
  Date:   2017-04-20 (Thu, 20 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Simplifying the mitigation text

Since there is no "one size fits all" mitigation, simplify the recommendations. The point is to draw attention to the problem, and trust developers to do the right thing.

  Commit: 040a5fef588e409c2a8a22088768fdfbf443bc81
      https://github.com/quicwg/base-drafts/commit/040a5fef588e409c2a8a22088768fdfbf443bc81
  Author: huitema <[email-masked]>
  Date:   2017-04-20 (Thu, 20 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  And fixing a typo.

  Commit: a168b3bd50a08fe0a984abc960452e90950ec19b
      https://github.com/quicwg/base-drafts/commit/a168b3bd50a08fe0a984abc960452e90950ec19b
  Author: huitema <[email-masked]>
  Date:   2017-04-20 (Thu, 20 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  STREAM frames.

  Commit: 31872b3649f9fd01edd84900730d341abe1cff9a
      https://github.com/quicwg/base-drafts/commit/31872b3649f9fd01edd84900730d341abe1cff9a
  Author: huitema <[email-masked]>
  Date:   2017-04-20 (Thu, 20 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Can lead

  Commit: b47c0307b3c07326bd86b59642e70bf7cf1ea34e
      https://github.com/quicwg/base-drafts/commit/b47c0307b3c07326bd86b59642e70bf7cf1ea34e
  Author: huitema <[email-masked]>
  Date:   2017-04-20 (Thu, 20 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  MAY -> could

  Commit: 1bacf33cd2d40d0959efef79e35d525a5e0e8fb9
      https://github.com/quicwg/base-drafts/commit/1bacf33cd2d40d0959efef79e35d525a5e0e8fb9
  Author: Martin Thomson <[email-masked]>
  Date:   2017-04-24 (Mon, 24 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Merge branch 'patch-1' of https://github.com/huitema/base-drafts into christian_attacks

  Commit: 1457f3981838cd63a3662ed76cefe4dc6c490a12
      https://github.com/quicwg/base-drafts/commit/1457f3981838cd63a3662ed76cefe4dc6c490a12
  Author: Martin Thomson <[email-masked]>
  Date:   2017-04-24 (Mon, 24 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Merge branch 'patch-2' of https://github.com/huitema/base-drafts into christian_attacks

  Commit: c61ac1163d47d052146e4f78db6a1487edd5c327
      https://github.com/quicwg/base-drafts/commit/c61ac1163d47d052146e4f78db6a1487edd5c327
  Author: Martin Thomson <[email-masked]>
  Date:   2017-04-24 (Mon, 24 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Merge branch 'patch-3' of https://github.com/huitema/base-drafts into christian_attacks

  Commit: 00b7da74273286b4507ca4453ff44fd15c2c1082
      https://github.com/quicwg/base-drafts/commit/00b7da74273286b4507ca4453ff44fd15c2c1082
  Author: Martin Thomson <[email-masked]>
  Date:   2017-04-24 (Mon, 24 Apr 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Wrap, editorial fixes

  Commit: c89eb53e0ffff3e4340f6bae6b845247a8bd9b63
      https://github.com/quicwg/base-drafts/commit/c89eb53e0ffff3e4340f6bae6b845247a8bd9b63
  Author: Martin Thomson <[email-masked]>
  Date:   2017-04-24 (Mon, 24 Apr 2017)

  Changed paths:
    M draft-ietf-quic-recovery.md
    M draft-ietf-quic-tls.md
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Merge branch 'master' into christian_attacks

Compare: https://github.com/quicwg/base-drafts/compare/1390ba89842d...c89eb53e0fff