Re: [quicwg/base-drafts] enforce the active_connection_id_limit (#3201)

[Mike Bishop <[e-mail]>]

MikeBishop commented on this pull request.



> @@ -999,8 +999,10 @@ retired are considered active; any active connection ID can be used.
 An endpoint SHOULD ensure that its peer has a sufficient number of available and
 unused connection IDs.  Endpoints store received connection IDs for future use
 and advertise the number of connection IDs they are willing to store with the
-active_connection_id_limit transport parameter.  An endpoint SHOULD NOT provide
-more connection IDs than the peer's limit.
+active_connection_id_limit transport parameter.  An endpoint MUST NOT provide
+more connection IDs than the peer's limit.  An endpoint that receives more
+connection IDs than its advertised active_connection_id_limit MUST close the
+connection with an error of type CONNECTION_ID_LIMIT_ERROR.

"MUST error" requires tracking.  It's possible that an implementation might decide to drop some CIDs and reduce the number it keeps without closing the connection.  "SHOULD/MAY error" provides the same deterrent effect for the issuer's misbehavior without placing a requirement on the receiver.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3201#pullrequestreview-314246383