3 ms·
But then the "close signal" is in practical terms not encrypted at all: You close a connection by not sending data for 30 seconds. That's a signal that's plainl
by xg15 3y ago
But then the "close signal" is in practical terms not encrypted at all: You close a connection by not sending data for 30 seconds. That's a signal that's plainly visible to network intermediaries. So then why not eliminate one risk of bad middlebox heuristics and expose the actual flag?
- Vecr 3y agoNot sending an explicit signal prevents certain injection attacks, but I'm not sure how much that would matter in practice. They would have to be some sort of off-path attack so the attacker can't just end the connection by blocking it.