[quicwg/base-drafts] Set PTO Timer when discarding keys (#3613)

[martinduke <[e-mail]>]

In the recovery draft, the pseudocode does something approximately right (appendix B.9, unfortunately buried in the congestion control example).

There is, however, no text in the spec that says you should set the PTO again when discarding keys if there is still outstanding data in the remaining contexts. This opens up some bizarre corner cases:

Server sends handshake flight + 1RTT
1RTT packets lost
Client acks the handshake flight -- all HS data is acked, and because the HS is not complete we do not set the PTO timer for the 1RTT data.
Client Finished arrives -- no action required by the spec.

It's true that HANDSHAKE_DONE will cover this in the server case, but in the client case where 0RTT is lost, the client might never send a 1RTT ack-eliciting packet. Better for us to tell the server to arm PTO when the handshake is confirmed. Better yet to do it when the handshake is complete, rather than when the keys are discarded (handshake confirmed).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/3613