Re: [quicwg/base-drafts] Authenticate connection IDs (#3499)

[Christian Huitema <[e-mail]>]

@ianswett I have implement it in picoquic as such:

1) Always send the handshake CID. Not an interop issue since implementations are supposed to ignore unknown CID

2) Send the retry CID when also sending the ODCID.

3) Verify that the client is not sending Retry CID

4) If the protocol version is newer than "draft 27", check that the handshake CID is present, and that the retry CID is present if required. Then check that the values are what is expected.

5) When verifying the retry token, check that the retry CID sent by the client is what is expected.

That version of picoquic is used in the interop runner, and I have not noticed any issue related to CID checks. But then the tests are bypassed with draft-27 versions. I suppose I could split the TP test into verifying that the CID are present if the version is newer than draft-27, and then check that the CID have the expected value if they are present. That would allow for interop testing with draft 27.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3499#issuecomment-602245593