4 ms·
Would it be possible to DDoS the deep-packet-inspecting routers with fake SSL handshake requests, or some partial part of it? Sort of like a TCP-SYN attack at
by i_love_rabbits 15y ago
Would it be possible to DDoS the deep-packet-inspecting routers with fake SSL handshake requests, or some partial part of it? Sort of like a TCP-SYN attack at the SSL level, and force them to give up DPI?
In other words, if we know that they are cutting off the handshake at the ServerKeyExchange phase, for example, couldn't we generate large amount fake SSL traffic that stops one step before that, cause the router to hang?
- vonmoltke 15y agoThat would only work if the filter was an endpoint. The filter isn't making SSL connections, so it doesn't care if the other side stops mid-transaction. All it has to do is look at the headers and drop packets with the target SSL handshake header.