Re: [quicwg/base-drafts] rate-limiting of CID issuance needs to be allowed (#2436)

[MikkelFJ <[e-mail]>]

As I mentioned earlier, I am concerned about non-HTTP uses cases, and for that matter also about mixing the layers. Transport should not rely on GOAWAY, and HTTP layer should be not concerned with refreshing CID's.

If you at all risk running out of CID's and you can't do anything about it, then you are not going to rotate CID's at all. That might also not be necessary, but is what will happen.

A limit per day is unproblematic, like at most 2 migrations per day without migration, reset counter on migration. If client is able to migrate enough to still cause a problem, we might need a total daily cap.

>From another perspective: If the concern regarding conflicts only has to do with a low risk of stateless reset, I'd rather have that than a high risk of running out of CID's.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2436#issuecomment-461921648