[Ecn-sane] robustness against attack?

Sebastian Moeller moeller0 at gmx.de
Mon Mar 25 05:40:42 EDT 2019


Hi Jonathan,


> On Mar 25, 2019, at 09:53, Jonathan Morton <chromatix99 at gmail.com> wrote:
> 
>> On 25 Mar, 2019, at 9:34 am, Jonathan Morton <chromatix99 at gmail.com> wrote:
>> 
>> If you'll recall, my initial workaround was simply to 
> 
> …not implement SCE on single-queue middleboxes, and rely on the known-good CE response in that case.  

	Which reduces the problem to get middle-boxes to use ECN at all ;)


> But if we can show that putting SCE there too is safe, that's even better.

	Given that the above might be harder than desired, it might be a good idea to immediately aim a bit higher than pure-CE ECN.

Best Regards
	Sebastian

> 
> - Jonathan Morton
> 



More information about the Ecn-sane mailing list