3 ms·
encrypting the whole protocol intrinsically protects against denial of service, buffer overflows and other common mistakes how exactly? My point is this, the c
by KaiserPro 8y ago
encrypting the whole protocol intrinsically protects against denial of service, buffer overflows and other common mistakes how exactly?
My point is this, the client is protected from a _lot_ of noise. QUIC changes this.
- tialaramex 8y agoEr, no. What happened is you have no idea what you're talking about.
- KaiserPro 8y agoso your saying that in TCP, a connection orientated protocol, at each hop the router/firewall/kernel is _not_ doing basic validation to see if that connection is valid, and not coming from a spurious source? The client does all this when you open socket.connect()? no, no, you're not and no, it doesn't, which is part of my point. Lots more noise will be forwarded to the client directly, after all, stateful connection management is impossible. With more noise, comes a bigger attack surface.