Date: Sat, 08 Jun 2019 19:24:43 -0700
From: Kazuho Oku <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+AFTOJK43D6XSOHO77ANVHUV3BGQGXEVBNHHBV45H2U@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/2769/c500179488@github.com>
In-Reply-To: <quicwg/base-drafts/pull/2769@github.com>
References: <quicwg/base-drafts/pull/2769@github.com>
Subject: Re: [quicwg/base-drafts] Request to Retire Locally Issued CIDs (#2769)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5cfc6deb2143b_4dff3f9c764cd964506390";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/_nvvnTDlFke0Vh_Q7wALFkdqpHE>


----==_mimepart_5cfc6deb2143b_4dff3f9c764cd964506390
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

PS. One way of resolving the security concern would be to require the use of Stateless Reset (instead of a CONNECTION_CLOSE), and also require that Stateless Reset Tokens for CID above "Retire Prior To" to be different from the tokens below or equal to "Retire Prior To."

Note: the latter requirement is necessary because [transport draft section 10.4.2](https://quicwg.org/base-drafts/draft-ietf-quic-transport.html#rfc.section.10.4.2) states that "the same Stateless Reset Token MAY be used for multiple connection IDs on the same connection."

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2769#issuecomment-500179488
----==_mimepart_5cfc6deb2143b_4dff3f9c764cd964506390
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p>PS. One way of resolving the security concern would be to require the use of Stateless Reset (instead of a CONNECTION_CLOSE), and also require that Stateless Reset Tokens for CID above "Retire Prior To" to be different from the tokens below or equal to "Retire Prior To."</p>
<p>Note: the latter requirement is necessary because <a href="https://quicwg.org/base-drafts/draft-ietf-quic-transport.html#rfc.section.10.4.2" rel="nofollow">transport draft section 10.4.2</a> states that "the same Stateless Reset Token MAY be used for multiple connection IDs on the same connection."</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/quicwg/base-drafts/pull/2769?email_source=notifications&amp;email_token=AFTOJK3XKNUQLNK3DDAE5UTPZRSWXA5CNFSM4HTARDHKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODXICEIA#issuecomment-500179488">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AFTOJK7KI77CDTFPXVT77TLPZRSWXANCNFSM4HTARDHA">mute the thread</a>.<img src="https://github.com/notifications/beacon/AFTOJKZG76M5X5YZUHAKLUDPZRSWXA5CNFSM4HTARDHKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODXICEIA.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/pull/2769?email_source=notifications\u0026email_token=AFTOJK3XKNUQLNK3DDAE5UTPZRSWXA5CNFSM4HTARDHKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODXICEIA#issuecomment-500179488",
"url": "https://github.com/quicwg/base-drafts/pull/2769?email_source=notifications\u0026email_token=AFTOJK3XKNUQLNK3DDAE5UTPZRSWXA5CNFSM4HTARDHKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODXICEIA#issuecomment-500179488",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>
----==_mimepart_5cfc6deb2143b_4dff3f9c764cd964506390--