mirror of
https://github.com/rustdesk/hbb_common.git
synced 2026-10-11 19:23:59 +00:00
kx: comments say what the fields and functions are
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019aokqJuhjvB3kijXtAg5Ns
This commit is contained in:
co-authored by
Claude Fable 5.1
parent
d9f519e915
commit
e3452acf59
@@ -9,7 +9,6 @@ message IdPk {
|
||||
// that swaps SDP fingerprints). Empty for non-WebRTC handshakes.
|
||||
string dtls_fingerprint = 3;
|
||||
// Newest key exchange version the signer speaks; absent, i.e. 0, is the original scheme.
|
||||
// Inside the signed identity so a rendezvous or relay cannot lower it.
|
||||
uint32 kx_version = 4;
|
||||
}
|
||||
|
||||
@@ -300,11 +299,7 @@ message RendezvousMessage {
|
||||
HttpProxyResponse http_proxy_response = 28;
|
||||
IceCandidate ice_candidate = 29;
|
||||
}
|
||||
// From the server, on every message after a key exchange: the version it advertised,
|
||||
// repeated inside the encrypted channel where nothing in transit can alter it. A client that
|
||||
// was shown a different value in the clear knows the handshake was altered and refuses the
|
||||
// stream. Every message and not the first alone, so that dropping one frame at a position
|
||||
// that needs no key to find does not rid an attacker of the check; dropping them all is a
|
||||
// plain DoS. Absent from servers that predate versions.
|
||||
// From the server, on every message after a key exchange: the version it advertised.
|
||||
// Absent from servers that predate versions.
|
||||
uint32 kx_advertised = 30;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user