Subject: Re: [quicwg/base-drafts] Server cannot proceed after invalid Retry token (#3396)
From: Martin Thomson <[email-masked]>
To: quicwg/base-drafts <[email-masked]>
Cc: Subscribed <[email-masked]>
Date: Tue, 28 Jan 2020 10:43:09 +0000 (UTC)
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>

The problem here is that something that is identifiable as a Retry token as distinct from a NEW_TOKEN token will ultimately not be usable.  There's a bit of hedging necessary though as junk that appears to be a Retry token is still ultimately just junk.

To be concrete, let's say that you generate Retry tokens that start with "RETRY!!!" and NEW_TOKEN tokens start with "~~~NEW_TOKEN" The difference between those two is such that it would be unlikely for corruption to cause one to be mistaken for the other, and you have a way to distinguish the two even when all the subsequent bits can't be interpreted after you lose keys or something like that.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/3396#issuecomment-579185046