Re:HTTP/3 needs us to make firewall changes
by mobilemidget on Saturday June 05, 2021 @03:53AM
(#27403125)
My personal opinion would prefer to improve those networks vs going UDP for http(s). Until spoofing, amplification attacks on UDP are properly tackled and not causing most internet outages, I'm not really looking forward to a UDP web (http/3)
[ Parent
| on HN ]
Re:HTTP/3 needs us to make firewall changes
by viraptor on Saturday June 05, 2021 @04:44AM
(#27403346)
Does http3 have a problem with amplification on the first answer packet?
I'm not sure spoofing is something transport protocols have to solve though. Authenticated bgp and source filtering is the layer for it and we needed it for decades already.
If I remember the amplification is about 3x, you need acks for the server to send more than that.
Re:HTTP/3 needs us to make firewall changes
by serendipitous on Sunday June 06, 2021 @07:17AM
(#27412324)
> Until spoofing, amplification attacks on UDP are properly tackled
This is already addressed by QUIC (the transport protocol used by HTTP/3). Those things are no more of a problem for HTTP/3 than they are for HTTP/2 or HTTP/1.