Subject: [quicwg/base-drafts] 4f1b34: Increase resilience to spoofed Version Negotiation...

From: Martin Thomson <[email-masked]>
Date: Tue, 27 Jun 2017 16:14:27 -0700

Branch: refs/heads/validate_vn
  Home:   https://github.com/quicwg/base-drafts
  Commit: 4f1b348990bd4e955537cfa576ea2fc470171bd2
      https://github.com/quicwg/base-drafts/commit/4f1b348990bd4e955537cfa576ea2fc470171bd2
  Author: Martin Thomson <[email-masked]>
  Date:   2017-06-27 (Tue, 27 Jun 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Increase resilience to spoofed Version Negotiation packets

There's two layers of defense here:

1. Version Negotiation echoes 31-bits of entropy (maybe more if you consider the version to be at all unpredictable, or the client's source address to contain any entropy).

2. If validation fails and version negotiation happened, encourage the client to try again ignoring any Version Negotiation packets that match the failed profile.

Closes #523.

  Commit: 1a940653eef207990c2b9fe9cc6ddac0980a577b
      https://github.com/quicwg/base-drafts/commit/1a940653eef207990c2b9fe9cc6ddac0980a577b
  Author: Martin Thomson <[email-masked]>
  Date:   2017-06-27 (Tue, 27 Jun 2017)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Review comments

Compare: https://github.com/quicwg/base-drafts/compare/de69df98de55...1a940653eef2