Posts

Short notes about the protocols we read. One idea each, and something you can do yourself.

A response before the upload ends

HTTP/2 lets a server answer before the request has ended, then reset the stream without an error. Try it against a live server, then reproduce it offline from a capture.

Decrypting a QUIC Initial packet by hand

A QUIC handshake is encrypted, but the keys for the first packets are not secret: they come from a value written in the clear in the packet itself. Here is the derivation, with every number you can check.