Re: [core] AD review of draft-ietf-core-echo-request-tag-10

[Christian Amsüss <[e-mail]>]

Hello Göran,

thanks for handling the comments.

On the topics in this sub-thread, I'm happy with all the changes, and
there's only a single remark left for me to make:

> > It’s not clear to me how a client can comply with this: how can the client
> > possibly know whether the messages it has sent would be considered invalid
> > by the server if they were replayed?  Or is there something I’m not
> > understanding?

In OSCORE, the size (or style) of the replay window *is* fixed for each
security context (and where protocols for establishing an OSCORE context
lack the terminology to express it, defaults to 32 messages). That was
added precisely for this reason.


I've noted that there are a few points in the original mail that have
not been taken up, I'm just going through them and will follow up
shortly (as I don't suppose they fall under the "consider the rest
handled").

Kind regards
Christian

-- 
There's always a bigger fish.
  -- Qui-Gon Jinn