3 ms·
How would the server know that the destination IP changed?
by underdeserver 7y ago
How would the server know that the destination IP changed?
- BenjiWiebe 7y agoWhen the acknowledgement packet suddenly comes from a new IP address, referencing an existing connection ID.
- mcguire 7y agoThere's security implications...
- Matthias247 7y agoThose are addressed by the QUIC specification, by having lots of encryption. The whole content of QUIC packets is encrypted. You can't really do a lot with connection IDs. And for most of the packets you can't even observe the full connection ID, since an abbreviated version is sent. Acknowledgements are encrypted.
- labawi 7y agoCan the transport path be hijacked from a single captured packet? As in capture a single packet, scribble an address and the connection now goes via Pentagon or China. I know it's possible for wireguard, maybe mosh.
- keithwinstein 7y agoNo -- Mosh is careful to make sure that a transient network attack can only result in a transient application-layer consequence. So a single misrouted IP datagram can't permanently affect the connection. Mosh does this at the cost of having client-only mobility; the client keeps sending to the same server address for the life of the connection.
- salmaanp 7y agothis sounds similar to SSL resumption