How variable is the response size? Can IoT devices try a small request and a larger one if needed, or do they need a large initial packet?
The client has to send 1200 byte packet(s) before the connection is established. The server must not send more than 3x the number of bytes back to the client before it has verified the client isn’t spoofed. The main difficulty is the size of the server’s certificate. There’s more about the complications in RFC 9000 section 8.1.
the design of IPv6 (are addresses routes?)
As far as I know, there was a lot of discussion about how addresses are split into host and network parts, and how network parts are allocated (hierarchially, geographicaly, …) and about decoupling endpoint identity from the route used to reach it. This eventually became LISP, the location / identity separation protocol (terrible name). But it is just addresses with more steps: the location is a globally routable network prefix which is still limited to a few million in total globally and still spoofable. And unlike 30 years ago, we know that endpoint identity must be cryptographic in nature and it must appear random to on-path snoops.
The client has to send 1200 byte packet(s) before the connection is established. The server must not send more than 3x the number of bytes back to the client before it has verified the client isn’t spoofed. The main difficulty is the size of the server’s certificate. There’s more about the complications in RFC 9000 section 8.1.
As far as I know, there was a lot of discussion about how addresses are split into host and network parts, and how network parts are allocated (hierarchially, geographicaly, …) and about decoupling endpoint identity from the route used to reach it. This eventually became LISP, the location / identity separation protocol (terrible name). But it is just addresses with more steps: the location is a globally routable network prefix which is still limited to a few million in total globally and still spoofable. And unlike 30 years ago, we know that endpoint identity must be cryptographic in nature and it must appear random to on-path snoops.
score 1 · canonical