Subject: [quicwg/base-drafts] Stateless Reset needs "on-path" proof (#1230)

From: Igor Lubashev <[email-masked]>
Date: Sun, 18 Mar 2018 18:46:16 +0000 (UTC)

Stateless Reset has contains a proof that the Server sent it.  However, if the server's key is compromised, Stateless Reset can be forged wholesale off-path.  Stateless Reset must contain a proof that the sender observed the original packet that caused Stateless Reset.  Clearly, there are many simple ways to do so.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1230