Subject: Re: [quicwg/base-drafts] Request to Retire Locally Issued CIDs (#2769)
From: Kazuho Oku <[email-masked]>
To: quicwg/base-drafts <[email-masked]>
Cc: Subscribed <[email-masked]>
Date: Sat, 08 Jun 2019 19:24:43 -0700
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>

PS. One way of resolving the security concern would be to require the use of Stateless Reset (instead of a CONNECTION_CLOSE), and also require that Stateless Reset Tokens for CID above "Retire Prior To" to be different from the tokens below or equal to "Retire Prior To."

Note: the latter requirement is necessary because [transport draft section 10.4.2](https://quicwg.org/base-drafts/draft-ietf-quic-transport.html#rfc.section.10.4.2) states that "the same Stateless Reset Token MAY be used for multiple connection IDs on the same connection."

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2769#issuecomment-500179488