Re: [quicwg/base-drafts] Authenticating connection IDs (#3439)

[Martin Thomson <[e-mail]>]

@DavidSchinazi,

> I'm not sure we should be discouraging servers from using client-generated connection IDs. We've been doing that for years and I'm not sure there is a credible attack here.

The problem is not with what you are doing, but a consequence of adding Retry to the protocol. In addressing the problems arising from that we can ask servers to make a small sacrifice in terms of requiring them to generate a new connection ID, something they need to know how to do anyway. Or, we can ask clients to conditionally validate server behaviour.

I appreciate that if you have no need to send Retry, this might be an imposition on the server, but from the outside it seems totally doable. I would like to understand less about the strength of your reluctance to offer a new connection ID and more about why it might be difficult to do so.

Is this expensive because you have to consult with load balancers?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/3439#issuecomment-595052750