Subject: [quicwg/base-drafts] f12bec: Thwart downgrade attacks between incompatible vers...

From: Martin Thomson <[email-masked]>
Date: Thu, 25 Oct 2018 01:54:01 -0700

Branch: refs/heads/vn-mkII
  Home:   https://github.com/quicwg/base-drafts
  Commit: f12becdc359d0741ddd8c57abf6ae9485a0530c9
      https://github.com/quicwg/base-drafts/commit/f12becdc359d0741ddd8c57abf6ae9485a0530c9
  Author: Martin Thomson <[email-masked]>
  Date:   2018-10-25 (Thu, 25 Oct 2018)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Thwart downgrade attacks between incompatible versions

This complicates things slightly more.  The client has to order its
supported versions strictly (and respect that ordering in its selection
of versions).  The server has to validate things more carefully.

I have an algorithm for validation in comments, I'm interested in
whether that is worth putting in the draft.

      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.