From b4245692496216ded54456629020b16bd074442b Mon Sep 17 00:00:00 2001 From: seanturner Date: Wed, 30 Jan 2019 18:14:37 +0900 Subject: [PATCH] capitalizing destination connection ID --- draft-ietf-quic-tls.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/draft-ietf-quic-tls.md b/draft-ietf-quic-tls.md index 59e273b8c9..3621040b73 100644 --- a/draft-ietf-quic-tls.md +++ b/draft-ietf-quic-tls.md @@ -818,8 +818,8 @@ packet protection, an endpoint first removes the header protection. All QUIC packets other than Version Negotiation and Retry packets are protected with an AEAD algorithm {{!AEAD}}. Prior to establishing a shared secret, packets -are protected with AEAD_AES_128_GCM and a key derived from the destination -connection ID in the client's first Initial packet (see {{initial-secrets}}). +are protected with AEAD_AES_128_GCM and a key derived from the Destination +Connection ID in the client's first Initial packet (see {{initial-secrets}}). This provides protection against off-path attackers and robustness against QUIC version unaware middleboxes, but not against on-path attackers.