Could the first 1200-byte QUIC packet be used to suspect a QUIC connection establishment ?
[MK] Yes, I think if you look at the first packet as a whole you can be reasonably sure that you look at a quic packet. I guess this is an assumption throughout the whole document, as section 2.4 says:
"New QUIC connections are established using a handshake, which is distinguishable on the wire and contains some information that can be passively observed."
[MK] Do we need to say more?
EV> hummm I guess not even if the text in 2.4 is rather generic while the point in 3.1 is really specific. Perhaps adding which handshake properties are 'distinguishable' already in section 2.4 ?
britram
commented
2 years ago
Could the first 1200-byte QUIC packet be used to suspect a QUIC connection establishment ?
[MK] Yes, I think if you look at the first packet as a whole you can be reasonably sure that you look at a quic packet. I guess this is an assumption throughout the whole document, as section 2.4 says:
"New QUIC connections are established using a handshake, which is distinguishable on the wire and contains some information that can be passively observed."
[MK] Do we need to say more?
EV> hummm I guess not even if the text in 2.4 is rather generic while the point in 3.1 is really specific. Perhaps adding which handshake properties are 'distinguishable' already in section 2.4 ?