Re: [quicwg/base-drafts] Authenticate connection IDs (#3499)

[David Schinazi <[e-mail]>]

DavidSchinazi commented on this pull request.



> @@ -1475,6 +1475,48 @@ lifetime of a connection, especially in response to connection migration
 ({{migration}}); see {{issue-cid}} for details.
 
 
+## Authenticating Connection IDs {#cid-auth}
+
+The choice each endpoint makes about connection IDs during the handshake is
+authenticated by including all values in transport parameters; see
+{{transport-parameters}}. This ensures that all connection IDs are authenticated
+by the cryptographic handshake.
+
+Each endpoint includes the value of the Source Connection ID field from Initial
+packets it sends in the handshake_connection_id transport parameter; see

I think it's called `handshake_connection_id` because it is the connection ID used during the handshake, I think it's a reasonable name

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3499#discussion_r396138532