Re: [quicwg/base-drafts] Permit 0-RTT after Retry and VN (#1514)

[Martin Thomson <[e-mail]>]

martinthomson commented on this pull request.



> @@ -770,6 +775,29 @@ are in a different packet number space to other packets (see
 {{packet-numbers}}).
 
 
+### 0-RTT Packet Numbers {#retry-0rtt-pn}
+
+Packet numbers for 0-RTT protected packets use the same space as 1-RTT protected
+packets.
+
+After a client receives a Retry or Version Negotiation packet, it MAY attempt to
+send data in 0-RTT packets after it sends a new Initial packet.  However, a
+client MUST NOT reset the packet number it uses for 0-RTT packets.  The keys

I realize now the source of the confusion.  You are concerned about the case where maybe all this 0-RTT is received (and can be processed).  I'm more concerned about catastrophic compromise of packet protection.  I think that the nonce reuse thing is more urgent.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/1514#discussion_r200522553