search

tlswg / dtls13-spec

Repo for DTLS 1.3
32 stars 25 forks source link

Records with bogus epochs should be discarded, not generate alerts #177

Closed ekr closed 3 years ago

hannestschofenig commented 3 years ago

What was the motivation for this change?

kaduk commented 3 years ago

What was the motivation for this change?

The idea was to bring us in line with the normal handling for invalid records, which is to ignore them rather than send an alert and tear things down. DTLS associations are supposed to be robust against injected packets.

I suspect that there is also some remnant of the previous state of affairs when just incrementing the epoch was all that was needed to generate new keys, as opposed to requiring KeyUpdate+ACK, though that's not directly related to making this change.