4 ms·
Though the cost is symmetric, right? The attacker would have to incur some computational cost for the handshake.
by testplzignore 4y ago
Though the cost is symmetric, right? The attacker would have to incur some computational cost for the handshake.
- blibble 4y agofor RSA signing is more expensive than verifying for EC algos it's the opposite
- wbl 4y agoThe attacker can replay the key material multiple times or use RSA modes where the server does a lot of work.
- advisedwang 4y agoI mean it's rare that the attacker is paying for the resources in large DDoS. Usually it's bot-nets and the like to the cost is paid by the owner of the owned machines.
- danpalmer 4y agoIn a way, but another way of looking at it is that on the same pool of resources the botnet wouldn’t be able to achieve the same request rate if they expended these extra resources.