I believe that my pull request was indeed covering the different cases you talk
about. See in-line pieces of text from my pull request:
On 11/21/19 10:48 AM, Eric Rescorla wrote:
To recap what I was saying at the microphone earlier today about
selfie/reroute issues, there are actually three separ
To recap what I was saying at the microphone earlier today about
selfie/reroute issues, there are actually three separate issues.
- A reflection attack where an outside attacker makes the client also
act as a server.
- A reroute attack where an outside attacker makes the client talk to
anothe