<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<div style="">
<blockquote dir="auto">
<p>mainly because there was a similar situation under tls1.2 where alert messages could be sent by the client continuously and cause a DoS on the server.</p>
</blockquote>
<p dir="auto">how is that different from a client that sends AppData records that are all padding?</p>
<p dir="auto">with tls1.2 the problem was that the attack was asymmetric – the alerts were not encrypted, and caused a lot of CPU use on server – here, the attacker and server have to perform the exact same operations, otherwise server will reject the key update as malformed</p>
<p dir="auto">note that the server doesn't have to answer 1-to-1 to every KeyUpdate request, it's valid to answer with just one KeyUpdate to those 20 KeyUpdates from the client, and it is ok to send that KeyUpdate only when, and right before, the AppData from server is sent (the test case would need to be updated to detect that though, IIRC)</p>
</div>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/issues/699#note_172246195">view it on GitLab</a>.
<br>
You're receiving this email because of your account on gitlab.com.
If you'd like to receive fewer emails, you can
<a href="https://gitlab.com/sent_notifications/2b43988fcf64f73a3bf45404424cb8af/unsubscribe">unsubscribe</a>
from this thread or
adjust your notification settings.
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/issues/699#note_172246195"}}</script>
</p>
</div>
</body>
</html>