Re: [quicwg/base-drafts] Add retry integrity tag (#3120)

[David Schinazi <[e-mail]>]

@martinthomson 
> I'm ambivalent with the implicit ODCID thing. I like implicit things generally because you can't succeed if you don't have the right information, but this seems like it might still fail if the client doesn't check the tag. We could completely avoid that being an issue if we enciphered the token, but that might change the optimization options enough that it isn't worthwhile.

The ODCID being implicit has the same checking properties as an explicit ODCID - the client could ignore that field entirely before.

That said I do like the idea of making it harder to not check, by encrypting the token. @nibanks if we were to encrypt the token with a zero-key, would that still be suitable? I think the overhead is very small as long as we don't use HKDF / SHA-2 here.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3120#issuecomment-544777830