3 ms·
Works the same way it works with UDP (because it is UDP), with a timeout.
by Vecr 3y ago
Works the same way it works with UDP (because it is UDP), with a timeout.
- xg15 3y agoBut then the "close signal" is in practical terms not encrypted at all: You close a connection by not sending data for 30 seconds. That's a signal that's plainly visible to network intermediaries. So then why not eliminate one risk of bad middlebox heuristics and expose the actual flag?
- Vecr 3y agoNot sending an explicit signal prevents certain injection attacks, but I'm not sure how much that would matter in practice. They would have to be some sort of off-path attack so the attacker can't just end the connection by blocking it.