Eric Rescorla
Eric Rescorla
How different is this from the existing format? I.e., is it going to produce crazy results when interpreted by other stacks?
This looks basically sound, but given that we are now at -08, can you update the float format?
Sure. I'll be adding varint support in the next week or so. On Fri, Dec 22, 2017 at 1:47 AM, Piet De Vaere wrote: > The new format is a...
Assuming i am reading the report correctly, it's spec compliance. I think it's probably in one of the existing PRs though On Mon, Feb 11, 2019 at 2:03 PM Richard...
Why not just use lower-case for this? Those fields are inaccessible to reflection anyway. For instance: https://github.com/ekr/minq/blob/master/codec.go#L155
@bifurcation I don't think this is true. The state machine should enforce correct ordering at this point.
This all sounds plausible and it matches the NSS API reasonably well... -Ekr On Mon, Dec 4, 2017 at 10:29 PM, Marten Seemann wrote: > Hello @ekr , @bifurcation >...
I do think you should use DoH, but I don't think it's that helpful to specify it as a defense against MITM attacks; that's why the TLS connection is authenticated...
To be clear, my point is primarily that HTTPS is designed to be secure even if the local network is totally compromised. In that case, it does not matter if...
@kdenhartog. I do think you should secure the DNS connection for privacy reasons. I do not think that it adds significant security value. My reasoning here is that most attackers...