News for hackers. Stuff that matters.

A comment on Why HTTPS for Everything?. Parent comment

Re:Why HTTPS for Everything? by ycmbntrthrwaway on Monday January 02, 2017 @12:06PM (#13302426)
True. Minimal TCP with 1 MSS window may be easy, but proper congestion control with fast recovery, F-RTO, tail loss probe, SACK etc. is much harder. Miss one of these aspects and you get a TCP that takes minutes to recover from a lost packet in some obscure case. It took years to debug Linux TCP stack. Even BSD stack is already way behind.
[ Parent | on HN ]
Re:Why HTTPS for Everything? by paulddraper on Monday January 02, 2017 @12:15PM (#13302522)
Given that the context is "ability to type commands to a web server over telnet as a learning experience", I was of course talking about minimal implementations. TCP with congestion control is hard, just as TLS with proper compatibility is hard.
[ Parent | on HN ]
Re:Why HTTPS for Everything? by tptacek on Monday January 02, 2017 @12:17PM (#13302537)
Yes: I was not including the difficulty of getting efficient congestion control implemented, but rather just the ability to deliver and receive TCP streams at all.
[ Parent | on HN ]