Subject: Weekly github digest (QUIC Working Group Specifications)

From: Github Notifications <[email-masked]>
Date: Sun, 9 Jun 2019 00:45:15 +0000 (UTC)

Issues
------
* quicwg/base-drafts (+6/-21/💬46)
  6 issues created:
  - HTTP/3 Cookie Crumbling (by MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2777 [-http] [design] 
  - Error code to be sent when the size of request headers exceed server's limit (by kazuho)
    https://github.com/quicwg/base-drafts/issues/2775 
  - HTTP/3 settings frames and prioritization  (by tomdedecker)
    https://github.com/quicwg/base-drafts/issues/2772 
  - Stateless Reset becomes a larger risk of amplification with longer CIDs (by ianswett)
    https://github.com/quicwg/base-drafts/issues/2770 [-transport] 
  - Remove QPACK settings maxima as useless (by dtikhonov)
    https://github.com/quicwg/base-drafts/issues/2766 
  - HTTP error codes use inconsistent language (by MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2765 [-http] [editorial] 

  12 issues received 46 new comments:
  - #2645 Retire My Own CID (11 by DavidSchinazi, mikkelfj, ianswett, erickinnear, nibanks, MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2645 [-transport] [design] 
  - #2770 If you want a Stateless Reset you need to send a much larger packet than before (7 by martinthomson, ianswett, MikeBishop, mikkelfj)
    https://github.com/quicwg/base-drafts/issues/2770 [-transport] 
  - #2775 Error code to be sent when the size of request headers exceed server's limit (6 by kazuho, ianswett, mikkelfj, MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2775 [-http] 
  - #2741 Re-visit initial keys discard (5 by DavidSchinazi, kazuho, MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2741 [-tls] [-transport] [design] 
  - #2753 NUM_PLACEHOLDERS MUST NOT be zero (3 by kazuho, rmarx, MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2753 [-http] 
  - #2754 Lessen the divergence from the HTTP/2 prioritization scheme by requiring all PRIORITY frames to be sent on the control stream (3 by rmarx, ianswett, MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2754 [-http] 
  - #2772 HTTP/3 settings frames and prioritization  (3 by kazuho, tomdedecker, MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2772 [-http] [editorial] 
  - #2766 Remove QPACK settings maxima as useless (2 by MikeBishop)
    https://github.com/quicwg/base-drafts/issues/2766 [-qpack] [design] 
  - #2309 Migration before handshake completed is very messy (2 by martinthomson, huitema)
    https://github.com/quicwg/base-drafts/issues/2309 [-transport] [design] [proposal-ready] 
  - #2765 HTTP error codes use inconsistent language (2 by dtikhonov, LPardue)
    https://github.com/quicwg/base-drafts/issues/2765 [-http] [editorial] 
  - #2339 QPACK: instructions and stream description is suboptimal (1 by afrind)
    https://github.com/quicwg/base-drafts/issues/2339 [-qpack] [editorial] 
  - #2734 Placeholder limits make for awkward clients (1 by rmarx)
    https://github.com/quicwg/base-drafts/issues/2734 [-http] 

  21 issues closed:
  - PRIORITY frame on control stream referencing unopened request stream https://github.com/quicwg/base-drafts/issues/2502 [-http] 
  - loss of only two packets can lead to an unrecoverable situation https://github.com/quicwg/base-drafts/issues/2267 [-transport] [design] [has-consensus] 
  - simultaneous key update can lead to deadlock https://github.com/quicwg/base-drafts/issues/2214 [-tls] [design] [has-consensus] 
  - Peers that only terminate a single connection on an IP/port cannot migrate with 0-byte CIDs https://github.com/quicwg/base-drafts/issues/2441 [-transport] [design] [has-consensus] 
  - Bring back AEAD_AES_128_CCM_8 now that we pad the plaintext https://github.com/quicwg/base-drafts/issues/2581 [-tls] [design] [has-consensus] 
  - Privacy of spin with multiple connections on same 5 tuple https://github.com/quicwg/base-drafts/issues/2720 [-transport] [editorial] 
  - Remove QPACK settings maxima as useless https://github.com/quicwg/base-drafts/issues/2766 [-qpack] [design] 
  - Avoid creating QPACK codec streams when unnecessary https://github.com/quicwg/base-drafts/issues/2100 [-qpack] [design] 
  - Optimistic ACK in early handshake https://github.com/quicwg/base-drafts/issues/2192 [-transport] [design] [has-consensus] 
  - Spoofed retry token attack on IP authentication https://github.com/quicwg/base-drafts/issues/2394 [-transport] [design] [has-consensus] 
  - 0-RTT flow control limits can't be increased https://github.com/quicwg/base-drafts/issues/2360 [-transport] [design] [has-consensus] 
  - Client MUST use 1-RTT packets if it reads 1-RTT packets https://github.com/quicwg/base-drafts/issues/2458 [-transport] [design] [has-consensus] 
  - Stateless Reset Lacks Normative Text https://github.com/quicwg/base-drafts/issues/2471 [-transport] [design] [has-consensus] 
  - Saving a round-trip time in the initial handshakes with retry https://github.com/quicwg/base-drafts/issues/2552 [-transport] [design] [has-consensus] 
  - Path validation should be done even for what looks like NAT rebinding https://github.com/quicwg/base-drafts/issues/2579 [-transport] [design] [has-consensus] 
  - Is path validation a SHOULD or a MUST -- pick one! https://github.com/quicwg/base-drafts/issues/2580 [-transport] [design] [has-consensus] 
  - Attacks Against Address Migration https://github.com/quicwg/base-drafts/issues/2582 [-transport] [design] [has-consensus] 
  - Transport error codes would be smaller and more consistent as a varint https://github.com/quicwg/base-drafts/issues/2672 [-transport] [design] [has-consensus] 
  - Reusing SRTs https://github.com/quicwg/base-drafts/issues/2732 [-transport] [design] [has-consensus] 
  - Checking duplicate TPs is onerous https://github.com/quicwg/base-drafts/issues/2689 [-transport] [design] [has-consensus] 
  - handling of coalesced packets with decryption errors creates DoS opportunity https://github.com/quicwg/base-drafts/issues/2308 [-transport] [design] [has-consensus] 

Pull requests
-------------
* quicwg/base-drafts (+7/-17/💬31)
  7 pull requests submitted:
  - Explain initial settings a little more (by MikeBishop)
    https://github.com/quicwg/base-drafts/pull/2776 [-http] [editorial] 
  - Discuss max-header-list-size from the other side (by MikeBishop)
    https://github.com/quicwg/base-drafts/pull/2774 [-http] 
  - Don't mandate zero server-initiated bidi streams (by MikeBishop)
    https://github.com/quicwg/base-drafts/pull/2773 [-http] 
  - Fix typo: s/steam/stream/ (by tomdedecker)
    https://github.com/quicwg/base-drafts/pull/2771 
  - Request to Retire Locally Issues CIDs (by nibanks)
    https://github.com/quicwg/base-drafts/pull/2769 
  - Fix typo: s/overiew/overview/ (by dtikhonov)
    https://github.com/quicwg/base-drafts/pull/2768 
  - Drop maximum value restrictions on QPACK settings (by dtikhonov)
    https://github.com/quicwg/base-drafts/pull/2767 

  7 pull requests received 31 new comments:
  - #2769 Request to Retire Locally Issued CIDs (17 by erickinnear, kazuho, marten-seemann, mikkelfj, nibanks, DavidSchinazi, MikeBishop, ianswett)
    https://github.com/quicwg/base-drafts/pull/2769 [-transport] 
  - #2761 allow PRIORITY frames referring to placeholders exceeding `SETTING_NUM_PLACEHOLDERS` (4 by kazuho, rmarx)
    https://github.com/quicwg/base-drafts/pull/2761 
  - #2762 Mandate allowing peer to create enough unidirectional streams for HTTP and QPACK (3 by ghedo, LPardue, MikeBishop)
    https://github.com/quicwg/base-drafts/pull/2762 [-http] 
  - #2370 Stronger migration handshake (3 by DavidSchinazi, huitema)
    https://github.com/quicwg/base-drafts/pull/2370 [-transport] [design] 
  - #2749 Allow longer CIDs (2 by mnot, martinduke)
    https://github.com/quicwg/base-drafts/pull/2749 [-invariants] [-transport] [design] 
  - #2557 Simplify kPersistentThreshold (1 by janaiyengar)
    https://github.com/quicwg/base-drafts/pull/2557 [-recovery] [editorial] 
  - #2690 Orphan Placeholder (1 by kazuho)
    https://github.com/quicwg/base-drafts/pull/2690 [-http] [design] 

  17 pull requests merged:
  - Orphan Placeholder
    https://github.com/quicwg/base-drafts/pull/2690 [-http] [design] 
  - Fix typo: s/steam/stream/
    https://github.com/quicwg/base-drafts/pull/2771 [-http] [editorial] 
  - transport: fix broken ref to PTO in recovery
    https://github.com/quicwg/base-drafts/pull/2758 
  - Output of the discard keys design team
    https://github.com/quicwg/base-drafts/pull/2673 [-tls] [-transport] [design] 
  - Enable/disable/coordinate spin per path
    https://github.com/quicwg/base-drafts/pull/2751 [-transport] [editorial] 
  - Drop maximum value restrictions on QPACK settings
    https://github.com/quicwg/base-drafts/pull/2767 [-qpack] [design] 
  - Allow not creating QPACK codec streams
    https://github.com/quicwg/base-drafts/pull/2529 [-qpack] [design] 
  - Don't use ECN if packets are discarded
    https://github.com/quicwg/base-drafts/pull/2750 [-transport] [editorial] 
  - fix typo
    https://github.com/quicwg/base-drafts/pull/2757 [-qpack] [editorial] 
  - Fix typo: s/overiew/overview/
    https://github.com/quicwg/base-drafts/pull/2768 [-http] [editorial] 
  -  0-RTT can't use transport parameters or 1-RTT frames 
    https://github.com/quicwg/base-drafts/pull/2461 [-transport] [design] 
  - Add normative language for stateless reset
    https://github.com/quicwg/base-drafts/pull/2574 [-transport] 
  - Stop requiring remote address to match during path validation
    https://github.com/quicwg/base-drafts/pull/2637 [-transport] [design] 
  - Change error codes from 16-bit to varints
    https://github.com/quicwg/base-drafts/pull/2680 [-transport] [design] 
  - Allow reuse of stateless reset tokens
    https://github.com/quicwg/base-drafts/pull/2733 [-transport] [design] 
  - Relax requirement of detecting duplicate TPs on receiver
    https://github.com/quicwg/base-drafts/pull/2691 [-transport] 
  - Recommend only one packet per encryption level
    https://github.com/quicwg/base-drafts/pull/2747 [-transport] [design] 

Repositories tracked by this digest:
-----------------------------------
* https://github.com/quicwg/base-drafts