Date: Tue, 25 Sep 2018 21:09:32 +0000 (UTC)
From: Martin Thomson <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4ab503abbdf9179a5b12e760fcc74a9f2f1a444c3ad92cf0000000117c2660c92a169ce15a875e1@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/1793/c424502381@github.com>
In-Reply-To: <quicwg/base-drafts/pull/1793@github.com>
References: <quicwg/base-drafts/pull/1793@github.com>
Subject: Re: [quicwg/base-drafts] The server needs to acknowledge that a Retry
 happened (#1793)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5baaa40c3c821_d1d3fc775ad45b831121c";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/6iyrfv6G2yik3hj14OuPntsFbEM>

----==_mimepart_5baaa40c3c821_d1d3fc775ad45b831121c
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

> Why is the design such that the client validates instead of the server? 

It creates the right incentives.  This way, server implementations can't cheap out and not implement the check or coordination.  If servers didn't check, middleboxes could come to rely on them not checking.  That leads to Retry coming from middleboxes, which I heard pretty firmly that we don't want.

Given how easy this is to manage with a tiny bit of coordination (Azure could simply publish their scheme for encoding the connection ID into the token, for instance), this scheme seems like the best way to avoid that class of problem.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/1793#issuecomment-424502381
----==_mimepart_5baaa40c3c821_d1d3fc775ad45b831121c
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<blockquote>
<p>Why is the design such that the client validates instead of the server?<=
/p>
</blockquote>
<p>It creates the right incentives.  This way, server implementations can't=
 cheap out and not implement the check or coordination.  If servers didn't =
check, middleboxes could come to rely on them not checking.  That leads to =
Retry coming from middleboxes, which I heard pretty firmly that we don't wa=
nt.</p>
<p>Given how easy this is to manage with a tiny bit of coordination (Azure =
could simply publish their scheme for encoding the connection ID into the t=
oken, for instance), this scheme seems like the best way to avoid that clas=
s of problem.</p>

<p style=3D"font-size:small;-webkit-text-size-adjust:none;color:#666;">&mda=
sh;<br />You are receiving this because you are subscribed to this thread.<=
br />Reply to this email directly, <a href=3D"https://github.com/quicwg/bas=
e-drafts/pull/1793#issuecomment-424502381">view it on GitHub</a>, or <a hre=
f=3D"https://github.com/notifications/unsubscribe-auth/AWbkq-KsjiLHj0y8tq99=
YPG42J8kGaW0ks5uepuMgaJpZM4W3pMj">mute the thread</a>.<img src=3D"https://g=
ithub.com/notifications/beacon/AWbkq2Acn-raYbE4tqzufmGM3wVrx0e_ks5uepuMgaJp=
ZM4W3pMj.gif" height=3D"1" width=3D"1" alt=3D"" /></p>
<script type=3D"application/json" data-scope=3D"inboxmarkup">{"api_version"=
:"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"Gi=
tHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"quicwg=
/base-drafts","subtitle":"GitHub repository","main_image_url":"https://asse=
ts-cdn.github.com/images/email/message_cards/header.png","avatar_image_url"=
:"https://assets-cdn.github.com/images/email/message_cards/avatar.png","act=
ion":{"name":"Open in GitHub","url":"https://github.com/quicwg/base-drafts"=
}},"updates":{"snippets":[{"icon":"PERSON","message":"@martinthomson in #17=
93: \u003e Why is the design such that the client validates instead of the =
server? \r\n\r\nIt creates the right incentives.  This way, server implemen=
tations can't cheap out and not implement the check or coordination.  If se=
rvers didn't check, middleboxes could come to rely on them not checking.  T=
hat leads to Retry coming from middleboxes, which I heard pretty firmly tha=
t we don't want.\r\n\r\nGiven how easy this is to manage with a tiny bit of=
 coordination (Azure could simply publish their scheme for encoding the con=
nection ID into the token, for instance), this scheme seems like the best w=
ay to avoid that class of problem."}],"action":{"name":"View Pull Request",=
"url":"https://github.com/quicwg/base-drafts/pull/1793#issuecomment-4245023=
81"}}}</script>
<script type=3D"application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/pull/1793#issuecomment-424=
502381",
"url": "https://github.com/quicwg/base-drafts/pull/1793#issuecomment-424502=
381",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
},
{
"@type": "MessageCard",
"@context": "http://schema.org/extensions",
"hideOriginalBody": "false",
"originator": "AF6C5A86-E920-430C-9C59-A73278B5EFEB",
"title": "Re: [quicwg/base-drafts] The server needs to acknowledge that a R=
etry happened (#1793)",
"sections": [
{
"text": "",
"activityTitle": "**Martin Thomson**",
"activityImage": "https://assets-cdn.github.com/images/email/message_cards/=
avatar.png",
"activitySubtitle": "@martinthomson",
"facts": [

]
}
],
"potentialAction": [
{
"name": "Add a comment",
"@type": "ActionCard",
"inputs": [
{
"isMultiLine": true,
"@type": "TextInput",
"id": "IssueComment",
"isRequired": false
}
],
"actions": [
{
"name": "Comment",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"IssueComment\",\n\"repositoryFullName\": \"q=
uicwg/base-drafts\",\n\"issueId\": 1793,\n\"IssueComment\": \"{{IssueCommen=
t.value}}\"\n}"
}
]
},
{
"name": "Close pull request",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"PullRequestClose\",\n\"repositoryFullName\":=
 \"quicwg/base-drafts\",\n\"pullRequestId\": 1793\n}"
},
{
"targets": [
{
"os": "default",
"uri": "https://github.com/quicwg/base-drafts/pull/1793#issuecomment-424502=
381"
}
],
"@type": "OpenUri",
"name": "View on GitHub"
},
{
"name": "Unsubscribe",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"MuteNotification\",\n\"threadId\": 383685411=
\n}"
}
],
"themeColor": "26292E"
}
]</script>=

----==_mimepart_5baaa40c3c821_d1d3fc775ad45b831121c--