Date: Fri, 29 Jun 2018 15:32:44 -0700
From: Igor Lubashev <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4abffedeccaefb983773f1e08e0f31e7c77dd71f0a892cf00000001174e758c92a169ce1418889d@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/1505/401490090@github.com>
In-Reply-To: <quicwg/base-drafts/issues/1505@github.com>
References: <quicwg/base-drafts/issues/1505@github.com>
Subject: Re: [quicwg/base-drafts] Stateless Reset from clients, bis (#1505)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5b36b38ce3a87_1f952b08ccae0f60132633";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/2kPZgOdfPLJ7o4lgtKNYEoo1oy0>


----==_mimepart_5b36b38ce3a87_1f952b08ccae0f60132633
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

Ted, take a look at #466 (closer to the end of the thread).

The problem we have right now is that client cannot supply a stateless reset token during handshake, because client's part of the handshake (unlike the server's) is not protected.  So the situation we have right now is that clients _cannot_ send a Stateless Reset any time later, until the server has switched to using a new CID from the client, provided by the client in NEW_CONNECTION_ID.  (And switching CIDs may never happen.)

So the "idea" I am proposing is very simple -- since the client cannot not send its stateless reset token associated with its CID during handshake, let it send that token later (as soon as it starts to send protected packets).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1505#issuecomment-401490090
----==_mimepart_5b36b38ce3a87_1f952b08ccae0f60132633
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<p>Ted, take a look at <a class=3D"issue-link js-issue-link" data-error-t=
ext=3D"Failed to load issue title" data-id=3D"224461522" data-permission-=
text=3D"Issue title is private" data-url=3D"https://github.com/quicwg/bas=
e-drafts/issues/466" href=3D"https://github.com/quicwg/base-drafts/issues=
/466">#466</a> (closer to the end of the thread).</p>
<p>The problem we have right now is that client cannot supply a stateless=
 reset token during handshake, because client's part of the handshake (un=
like the server's) is not protected.  So the situation we have right now =
is that clients <em>cannot</em> send a Stateless Reset any time later, un=
til the server has switched to using a new CID from the client, provided =
by the client in NEW_CONNECTION_ID.  (And switching CIDs may never happen=
.)</p>
<p>So the "idea" I am proposing is very simple -- since the client cannot=
 not send its stateless reset token associated with its CID during handsh=
ake, let it send that token later (as soon as it starts to send protected=
 packets).</p>

<p style=3D"font-size:small;-webkit-text-size-adjust:none;color:#666;">&m=
dash;<br />You are receiving this because you are subscribed to this thre=
ad.<br />Reply to this email directly, <a href=3D"https://github.com/quic=
wg/base-drafts/issues/1505#issuecomment-401490090">view it on GitHub</a>,=
 or <a href=3D"https://github.com/notifications/unsubscribe-auth/AWbkq2zL=
iPgdKYGCJTMz2o7_8U19Ruvbks5uBqsMgaJpZM4U9sIC">mute the thread</a>.<img sr=
c=3D"https://github.com/notifications/beacon/AWbkq4hl-2Q0jwiMv1OsMvBKvjeI=
JfmGks5uBqsMgaJpZM4U9sIC.gif" height=3D"1" width=3D"1" alt=3D"" /></p>
<script type=3D"application/json" data-scope=3D"inboxmarkup">{"api_versio=
n":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name"=
:"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"=
quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"http=
s://assets-cdn.github.com/images/email/message_cards/header.png","avatar_=
image_url":"https://assets-cdn.github.com/images/email/message_cards/avat=
ar.png","action":{"name":"Open in GitHub","url":"https://github.com/quicw=
g/base-drafts"}},"updates":{"snippets":[{"icon":"PERSON","message":"@igor=
lord in #1505: Ted, take a look at #466 (closer to the end of the thread)=
.\r\n\r\nThe problem we have right now is that client cannot supply a sta=
teless reset token during handshake, because client's part of the handsha=
ke (unlike the server's) is not protected.  So the situation we have righ=
t now is that clients _cannot_ send a Stateless Reset any time later, unt=
il the server has switched to using a new CID from the client, provided b=
y the client in NEW_CONNECTION_ID.  (And switching CIDs may never happen.=
)\r\n\r\nSo the \"idea\" I am proposing is very simple -- since the clien=
t cannot not send its stateless reset token associated with its CID durin=
g handshake, let it send that token later (as soon as it starts to send p=
rotected packets)."}],"action":{"name":"View Issue","url":"https://github=
.com/quicwg/base-drafts/issues/1505#issuecomment-401490090"}}}</script>
<script type=3D"application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/issues/1505#issuecomment=
-401490090",
"url": "https://github.com/quicwg/base-drafts/issues/1505#issuecomment-40=
1490090",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
},
{
"@type": "MessageCard",
"@context": "http://schema.org/extensions",
"hideOriginalBody": "false",
"originator": "AF6C5A86-E920-430C-9C59-A73278B5EFEB",
"title": "Re: [quicwg/base-drafts] Stateless Reset from clients, bis (#15=
05)",
"sections": [
{
"text": "",
"activityTitle": "**Igor Lubashev**",
"activityImage": "https://assets-cdn.github.com/images/email/message_card=
s/avatar.png",
"activitySubtitle": "@igorlord",
"facts": [

]
}
],
"potentialAction": [
{
"name": "Add a comment",
"@type": "ActionCard",
"inputs": [
{
"isMultiLine": true,
"@type": "TextInput",
"id": "IssueComment",
"isRequired": false
}
],
"actions": [
{
"name": "Comment",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"IssueComment\",\n\"repositoryFullName\": \=
"quicwg/base-drafts\",\n\"issueId\": 1505,\n\"IssueComment\": \"{{IssueCo=
mment.value}}\"\n}"
}
]
},
{
"name": "Close issue",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"IssueClose\",\n\"repositoryFullName\": \"q=
uicwg/base-drafts\",\n\"issueId\": 1505\n}"
},
{
"targets": [
{
"os": "default",
"uri": "https://github.com/quicwg/base-drafts/issues/1505#issuecomment-40=
1490090"
}
],
"@type": "OpenUri",
"name": "View on GitHub"
},
{
"name": "Unsubscribe",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"MuteNotification\",\n\"threadId\": 3517158=
42\n}"
}
],
"themeColor": "26292E"
}
]</script>=

----==_mimepart_5b36b38ce3a87_1f952b08ccae0f60132633--