Subject: Re: The git protocol and DoS

From: "H. Peter Anvin" <[email-masked]>
Date: Wed, 19 Oct 2005 15:01:19 -0700

Junio C Hamano wrote:
> Linus Torvalds <[email-masked]> writes:
> 
>>But once you're talking to a git-aware 
>>SYN-flooder, I don't think a challenge-response makes it any better, since 
>>a git-aware SYN-flooder would just be written to give the right response.
> 
> I think Peter's point is that the one that can give the right
> response needs to read from the server to compute it, and at
> that point it is not a "SYN-flooder" anymore.
> 

Right.  It has been shown that requiring some effort on the part of the 
client before the server spends work on it can greatly reduce the 
capabilities of a limited-resource client to execute a DoS.

	-hpa