Re: [quicwg/base-drafts] NEW_TOKEN token and encryption (#2543)

Dmitri Tikhonov <> Thu, 21 March 2019 21:03 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id EECF0124BA8 for <>; Thu, 21 Mar 2019 14:03:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -8.001
X-Spam-Status: No, score=-8.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (1024-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id yFHpcfefD9KU for <>; Thu, 21 Mar 2019 14:03:16 -0700 (PDT)
Received: from ( []) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 6D62812008F for <>; Thu, 21 Mar 2019 14:03:16 -0700 (PDT)
Date: Thu, 21 Mar 2019 14:03:15 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=pf2014; t=1553202195; bh=PKlBHyJyu2rRSl/EAcckRQwT6ZxoEjgLEhIv3CHaRQ8=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=FPcJnGNdEJ0v9DknRoNDprIPXPK6gJw8u5rZNX8KbIuUzf9eESSEFFNq/b+jh8p72 EDQdexAyCarSEWfa9MWtvqrRDDG6YcFiRSb3wPtY2VLITuVuTuFP5lapjx3zFYITTA xxT0gOs9fEGXXb5ndW2jCaloT6TPMyzMoSP4mA9U=
From: Dmitri Tikhonov <>
Reply-To: quicwg/base-drafts <>
To: quicwg/base-drafts <>
Cc: Subscribed <>
Message-ID: <quicwg/base-drafts/issues/2543/>
In-Reply-To: <quicwg/base-drafts/issues/>
References: <quicwg/base-drafts/issues/>
Subject: Re: [quicwg/base-drafts] NEW_TOKEN token and encryption (#2543)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5c93fc133799f_7dff3f92ef2d45bc376f9"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: dtikhonov
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
Archived-At: <>
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 21 Mar 2019 21:03:18 -0000

I think the current text is fine:

   Unlike the token that is created for a Retry packet, there might be
   some time between when the token is created and when the token is
   subsequently used.  Thus, a token SHOULD include an expiration time.
   The server MAY include either an explicit expiration time or an
   issued timestamp and dynamically calculate the expiration time.  It
   is also unlikely that the client port number is the same on two
   different connections; validating the port is therefore unlikely to
   be successful.

"include" translates to "put into the token and encrypt" in my mind.  Reading that a token is "associated" with an expiration time would give me pause.

You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub: