[quicwg/base-drafts] Can Finished be sent as 1-RTT data? (#785)

[Christian Huitema <[e-mail]>]

I know that in TLS 1.3, the answer is no. But the TLS answer applies to TLS over TCP, for which TLS manages the transition from handshake data to application data. QUIC is arguably different. The stream zero frame will carry the Finished message as an encrypted handshake message. But the spec is a bit ambiguous as to whether this stream zero frame shall be carried as "Client Clear Text" or "1-RTT Data". 

I would much prefer 1-RTT data, because of repetition handling. If we imposed Client Clear Text, and the packet is lost, the stream zero frame will have to be retransmitted again as client clear text. That means interleaving clear text data and encrypted data within a single set of sequence number, and I am convinced that that can be abused to carry some kind of denial of service.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/785