Re: [quicwg/base-drafts] Full (mostly) editorial pass (#1665)

[Mike Bishop <[e-mail]>]

MikeBishop commented on this pull request.



> @@ -2560,11 +2594,16 @@ properly continue the connection.  An endpoint that wishes to communicate a
 fatal connection error MUST use a closing frame if it has sufficient state to do
 so.
 
-To support this process, a token is sent by endpoints.  The token is carried in
-the NEW_CONNECTION_ID frame sent by either peer, and servers can specify the
-stateless_reset_token transport parameter during the handshake (clients cannot
-because their transport parameters don't have confidentiality protection).  This
-value is protected by encryption, so only client and server know this value.
+To support this process, a token is sent by the endpoints that can be recovered
+or regenerated by the endpoint based on the information available in each packet
+even if the connection state was lost. This provides a protect mechanism to
+identify Stateless Reset packets from an attacker.

That works.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/1665#discussion_r210691284