Subject: [quicwg/base-drafts] 422654: Get rid of DoS vulnerability in Reserved Bits

From: Martin Thomson <[email-masked]>
Date: Tue, 05 Feb 2019 15:43:23 -0800

Branch: refs/heads/master
  Home:   https://github.com/quicwg/base-drafts
  Commit: 4226540cb935df4c65787e48b325e140e44ad710
      https://github.com/quicwg/base-drafts/commit/4226540cb935df4c65787e48b325e140e44ad710
  Author: martinduke <[email-masked]>
  Date:   2018-12-30 (Sun, 30 Dec 2018)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Get rid of DoS vulnerability in Reserved Bits

As currently written, any garbage packet, after removing header protection, will have nonzero reserved bits and bring the connection down. Not good!

Similarly, it is perverse to force me to actually decrypt the full packet to see if it turns out to be a misbehaving end host and comply with the other possible reading of this requirement. Let the receiver just drop the bad packet after header decryption and carry on.

  Commit: 4ae95269177232b01918af4ccc7b006b63cdb3d5
      https://github.com/quicwg/base-drafts/commit/4ae95269177232b01918af4ccc7b006b63cdb3d5
  Author: martinduke <[email-masked]>
  Date:   2018-12-30 (Sun, 30 Dec 2018)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  whitespace

  Commit: f668691287e3eccf8e330761fdb79f44e4d4edb8
      https://github.com/quicwg/base-drafts/commit/f668691287e3eccf8e330761fdb79f44e4d4edb8
  Author: martinduke <[email-masked]>
  Date:   2018-12-30 (Sun, 30 Dec 2018)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Addressed MT's issue

This is a clarification now, rather than a change. Perhaps we should add more about why, but at least this makes it clear.

  Commit: f780ef402954ac5a9efabb23a556769f121dbc1d
      https://github.com/quicwg/base-drafts/commit/f780ef402954ac5a9efabb23a556769f121dbc1d
  Author: Martin Thomson <[email-masked]>
  Date:   2019-01-09 (Wed, 09 Jan 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Update draft-ietf-quic-transport.md

Co-Authored-By: martinduke <[email-masked]>

  Commit: 3b36352247f614b80c4710256547915f151d3e82
      https://github.com/quicwg/base-drafts/commit/3b36352247f614b80c4710256547915f151d3e82
  Author: martinduke <[email-masked]>
  Date:   2019-01-09 (Wed, 09 Jan 2019)

  Changed paths:
    M draft-ietf-quic-http.md
    M draft-ietf-quic-recovery.md
    M draft-ietf-quic-tls.md
    M draft-ietf-quic-transport.md
    A initial-protection.js

  Log Message:
  -----------
  Merge branch 'master' into patch-32

  Commit: 74da0422dd2f96a1c77357d12916a62a1e7dc326
      https://github.com/quicwg/base-drafts/commit/74da0422dd2f96a1c77357d12916a62a1e7dc326
  Author: martinduke <[email-masked]>
  Date:   2019-02-05 (Tue, 05 Feb 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Cleaned up after discussion in Tokyo

  Commit: 7d3489be3b673898d35c3422b29d9cea43c875fa
      https://github.com/quicwg/base-drafts/commit/7d3489be3b673898d35c3422b29d9cea43c875fa
  Author: martinduke <[email-masked]>
  Date:   2019-02-05 (Tue, 05 Feb 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Added more explanatory text

  Commit: d291c753fcd49194a1c6761f82bbe57e2c188535
      https://github.com/quicwg/base-drafts/commit/d291c753fcd49194a1c6761f82bbe57e2c188535
  Author: martinduke <[email-masked]>
  Date:   2019-02-05 (Tue, 05 Feb 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  typos

  Commit: 8b53c9413d56fa9253eb2c572b1be588a1485af7
      https://github.com/quicwg/base-drafts/commit/8b53c9413d56fa9253eb2c572b1be588a1485af7
  Author: Martin Thomson <[email-masked]>
  Date:   2019-02-06 (Wed, 06 Feb 2019)

  Changed paths:
    A .github/release-drafter.yml
    M draft-ietf-quic-http.md
    M draft-ietf-quic-invariants.md
    M draft-ietf-quic-qpack.md
    M draft-ietf-quic-recovery.md
    M draft-ietf-quic-spin-exp.md
    M draft-ietf-quic-tls.md
    M draft-ietf-quic-transport.md
    M tag.sh

  Log Message:
  -----------
  Merge branch 'master' into pr2280

  Commit: addb32807e18bc1443b4580acf4e7687696d44e6
      https://github.com/quicwg/base-drafts/commit/addb32807e18bc1443b4580acf4e7687696d44e6
  Author: Martin Thomson <[email-masked]>
  Date:   2019-02-06 (Wed, 06 Feb 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Wrapping

Compare: https://github.com/quicwg/base-drafts/compare/0d554c67b84b...addb32807e18