Re: [quicwg/base-drafts] Immediately close with INVALID_TOKEN (#3107)

[Marten Seemann <[e-mail]>]

marten-seemann commented on this pull request.



> @@ -1641,6 +1641,14 @@ of connection establishment.  By giving the client a different connection ID to
 use, a server can cause the connection to be routed to a server instance with
 more resources available for new connections.
 
+If a server receives a client Initial with a unverifiable Retry token,
+it knows the client will not accept another Retry token.  It can either
+proceed with the handshake without verifying the token or immediately close

If we assume that servers only require Retries when they’re under attack, they might not bother checking the validity of a token when they’re not under attack.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3107#discussion_r337312373