Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding a description of the Slowloris attack in security section #448

Merged
merged 8 commits into from
Apr 24, 2017
Merged

Adding a description of the Slowloris attack in security section #448

merged 8 commits into from
Apr 24, 2017

Conversation

huitema
Copy link
Contributor

@huitema huitema commented Apr 20, 2017

No description provided.

Copy link
Member

@martinthomson martinthomson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

simulate a high loss rate and slow down sending by the other endpoint.

QUIC implementers should consider implementing the
classic mitigations of the Slowloris attack, such as increasing the maximum
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"the classic" isn't needed :) How about "QUIC deployments SHOULD provide mitigations for the Slowloris attack, such as ..."

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK, will fix that once I get to pass the online checks.

@martinthomson martinthomson merged commit 9dbba10 into quicwg:master Apr 24, 2017
@martinthomson martinthomson mentioned this pull request Apr 28, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants