{"action":"created","issue":{"url":"https://api.github.com/repos/letsencrypt/boulder/issues/4525","repository_url":"https://api.github.com/repos/letsencrypt/boulder","labels_url":"https://api.github.com/repos/letsencrypt/boulder/issues/4525/labels{/name}","comments_url":"https://api.github.com/repos/letsencrypt/boulder/issues/4525/comments","events_url":"https://api.github.com/repos/letsencrypt/boulder/issues/4525/events","html_url":"https://github.com/letsencrypt/boulder/issues/4525","id":516726626,"node_id":"MDU6SXNzdWU1MTY3MjY2MjY=","number":4525,"title":"Pad responses to trigger MTU issues","user":{"login":"mnordhoff","id":1025227,"node_id":"MDQ6VXNlcjEwMjUyMjc=","avatar_url":"https://avatars3.githubusercontent.com/u/1025227?v=4","gravatar_id":"","url":"https://api.github.com/users/mnordhoff","html_url":"https://github.com/mnordhoff","followers_url":"https://api.github.com/users/mnordhoff/followers","following_url":"https://api.github.com/users/mnordhoff/following{/other_user}","gists_url":"https://api.github.com/users/mnordhoff/gists{/gist_id}","starred_url":"https://api.github.com/users/mnordhoff/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mnordhoff/subscriptions","organizations_url":"https://api.github.com/users/mnordhoff/orgs","repos_url":"https://api.github.com/users/mnordhoff/repos","events_url":"https://api.github.com/users/mnordhoff/events{/privacy}","received_events_url":"https://api.github.com/users/mnordhoff/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2019-11-02T21:26:47Z","updated_at":"2019-11-04T18:44:25Z","closed_at":null,"author_association":"NONE","body":"I have a random weird idea.\r\n\r\nRarely, users have MTU problems interacting with the Let's Encrypt API. This can result in a nasty failure mode: Most requests and responses succeed, they successfully issue a certificate, and then downloading the certificate fails because it's contained in the the first large packets.\r\n\r\nWhat if you made the responses to other API calls larger in order to break connections earlier in the process, before a certificate gets issued? Like by adding a kilobyte of whitespace or `\"padding123\": \"xxxxxxxxxxxxxxxxxxx...\"` fields to, say, `/directory` or `/acme/new-order`.\r\n\r\nIt would waste bandwidth for millions of people, but could prevent a handful of certificates from getting issued and then wasted."},"comment":{"url":"https://api.github.com/repos/letsencrypt/boulder/issues/comments/549492100","html_url":"https://github.com/letsencrypt/boulder/issues/4525#issuecomment-549492100","issue_url":"https://api.github.com/repos/letsencrypt/boulder/issues/4525","id":549492100,"node_id":"MDEyOklzc3VlQ29tbWVudDU0OTQ5MjEwMA==","user":{"login":"jsha","id":220205,"node_id":"MDQ6VXNlcjIyMDIwNQ==","avatar_url":"https://avatars1.githubusercontent.com/u/220205?v=4","gravatar_id":"","url":"https://api.github.com/users/jsha","html_url":"https://github.com/jsha","followers_url":"https://api.github.com/users/jsha/followers","following_url":"https://api.github.com/users/jsha/following{/other_user}","gists_url":"https://api.github.com/users/jsha/gists{/gist_id}","starred_url":"https://api.github.com/users/jsha/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsha/subscriptions","organizations_url":"https://api.github.com/users/jsha/orgs","repos_url":"https://api.github.com/users/jsha/repos","events_url":"https://api.github.com/users/jsha/events{/privacy}","received_events_url":"https://api.github.com/users/jsha/received_events","type":"User","site_admin":false},"created_at":"2019-11-04T18:44:25Z","updated_at":"2019-11-04T18:44:25Z","author_association":"CONTRIBUTOR","body":"This is really interesting and a clever idea! I think it has potential. If you have some links available to threads where people have had MTU problems, would you mind adding them here so we have some additional documentation? I'd also want to see if we can reproduce the conditions we're trying to fix, in order to make sure our fix really works."}}
{"actor":{"display_login":"jsha"}}