[Cryptography] Heartbleed and fundamental crypto programming practices

John Gilmore gnu at toad.com
Sun Apr 13 17:12:40 EDT 2014


> Or is there something fundamental about the congestion issue that stops
> UDP being usable under any circumstances?

No.  BitTorrent was rehosted on UDP, using its own delay-sensitive end
to end transmission protocol, and it works fine (and better than when
it was using TCP).  RTP (VoIP) also works pretty well on UDP.  Not to
mention the classic use of UDP, DNS.

See in general
http://www.bufferbloat.net/projects/bloat/wiki/Introduction for why
TCP clogs the queues at routers.  The very short summary is that TCP
only throttles back after a packet is dropped, but in the last 20
years everyone has been adding RAM buffers to routers so that they
would never drop a packet.  The right cure is to fix TCP so it
throttles back when it notices packet delay, but nobody's
doing that because fixed-TCP would perform "worse" on single
connections than unfixed-TCP, so instead they're moving off TCP
to their own protocols that do the same.

	John


More information about the cryptography mailing list