Re: [quicwg/base-drafts] Ben Kaduk's HTTP/3 Discuss 2 (#4775)

[Martin Thomson <[e-mail]>]

I think that the main concern here is addressed by a change - or addition - to the text that Ben quoted.  That is, we change from the determination of authority being made universally based on the set of names in the certificate (a passive determination, if you will) to the per-name, query-based approach that we generally have (an active seeking of authority).

As the quoted text could be read as non-normative when placed besides more specific text with clear normative force.

The other points might benefit from clarification, but the problem largely stems from this passive definition of authority.

Regarding revocation checks that succeed at handshake time, but fail later, I would suggest the answer only affects the determination of authority for the name that is queried.  That is consistent with the per-name, query-based approach.  The idea that the connection might be torn down is not consistent with that.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/4775#issuecomment-764002408