Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
ashieh
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
1.
▲
by
ashieh
14y ago
The prototype did not use AES to encrypt continuations. As you said, the details are tricky. For instance, CTR mode may well be insecure. In a stateless environment, it's quite likely that the client could trick the server into encrypting m
2.
▲
by
ashieh
14y ago
Thanks for your interest in chatting about our work. The replay protection is intended to prevent clients from tricking the server into sending more than permitted by TCP congestion control. I.e., it protects the network and other clients f