Subject: [quicwg/base-drafts] 8b1d53: More about authenticating Version Negotiation

From: Martin Thomson <[email-masked]>
Date: Tue, 14 Jul 2020 19:20:20 -0700

Branch: refs/heads/master
  Home:   https://github.com/quicwg/base-drafts
  Commit: 8b1d53f27a638bbc9f5a5b4bc0dac53616aea171
      https://github.com/quicwg/base-drafts/commit/8b1d53f27a638bbc9f5a5b4bc0dac53616aea171
  Author: Martin Thomson <[email-masked]>
  Date:   2020-07-08 (Wed, 08 Jul 2020)

  Changed paths:
    M draft-ietf-quic-invariants.md

  Log Message:
  -----------
  More about authenticating Version Negotiation

This clarifies that it is a mechanism in the target QUIC version that
authenticates the information.

This also lifts the strong requirement on authenticating the contents of
Version Negotiation.  QUIC version 1 does not do this and so does not
comply with this requirement.  The intent was always that only
information that is used needs to be authenticated in this way.

(This is a tiny bit of evasion as Version Negotiation is used in QUIC
version 1 as a signal that a version is not supported, which results in
clients abandoning connections.)

Closes #3828.

  Commit: 0f0c2ccc3d606e62bac1fa77e71709d9416330b8
      https://github.com/quicwg/base-drafts/commit/0f0c2ccc3d606e62bac1fa77e71709d9416330b8
  Author: Martin Thomson <[email-masked]>
  Date:   2020-07-08 (Wed, 08 Jul 2020)

  Changed paths:
    M draft-ietf-quic-invariants.md

  Log Message:
  -----------
  Reword

  Commit: 4ac2b341f40beb5a0a939fcf19b85a3184b89de4
      https://github.com/quicwg/base-drafts/commit/4ac2b341f40beb5a0a939fcf19b85a3184b89de4
  Author: Martin Thomson <[email-masked]>
  Date:   2020-07-15 (Wed, 15 Jul 2020)

  Changed paths:
    M draft-ietf-quic-invariants.md

  Log Message:
  -----------
  authenticate but verify

  Commit: 38a50a59c03b62bf602ce03153dbe8e56bb1fe67
      https://github.com/quicwg/base-drafts/commit/38a50a59c03b62bf602ce03153dbe8e56bb1fe67
  Author: Martin Thomson <[email-masked]>
  Date:   2020-07-15 (Wed, 15 Jul 2020)

  Changed paths:
    M draft-ietf-quic-invariants.md

  Log Message:
  -----------
  Only authenticate if you change

  Commit: 51c526569736209bef98caf749e02e7e302b38c5
      https://github.com/quicwg/base-drafts/commit/51c526569736209bef98caf749e02e7e302b38c5
  Author: Martin Thomson <[email-masked]>
  Date:   2020-07-15 (Wed, 15 Jul 2020)

  Changed paths:
    M draft-ietf-quic-invariants.md

  Log Message:
  -----------
  modification/corruption reword

Co-authored-by: Jana Iyengar <[email-masked]>

  Commit: 07556b024efb3c6aa192c8e1188437b1deb08c0a
      https://github.com/quicwg/base-drafts/commit/07556b024efb3c6aa192c8e1188437b1deb08c0a
  Author: Martin Thomson <[email-masked]>
  Date:   2020-07-15 (Wed, 15 Jul 2020)

  Changed paths:
    M draft-ietf-quic-invariants.md

  Log Message:
  -----------
  Merge pull request #3871 from quicwg/authenticate-vn-external

More about authenticating Version Negotiation

Compare: https://github.com/quicwg/base-drafts/compare/0c5083f545f4...07556b024efb