Re: [quicwg/base-drafts] Allow servers to omit version negotiation in response to 0-RTT packets. (#1758)

[Mike Bishop <[e-mail]>]

This is a corner-case of a corner-case.  In the general case, if you don't recognize the client's proposed version, you have to send VN because you can't interpret anything about it and the spec says that you SHOULD NOT try.  But here, you know the version you've received well enough to know what packet types you don't want to send VN in response to, but you don't actually speak that version.  To me, that sounds like a version that's been deprecated for security reasons; outside of that, you either know a version or you don't.

I'd agree with Martin, the right framing here is that servers aren't required to send VN in response to every packet, but are allowed to use heuristics to limit the number they send.  That could be based on packet type if it knows but refuses to speak the version, or by having a short-lived cache of client IP/ports to which you've recently send VN packets, etc.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/1758#issuecomment-424502413