Re: How does a server identify a new connection?

[Dmitri Tikhonov <[e-mail]>]

On Tue, Dec 04, 2018 at 08:54:41AM -0500, Dmitri Tikhonov wrote:
>     Is the server to try each of its connection candidates in
>     turn to see which one successfully decrypts the packet?

Kazuho,

You did not respond to this question, but it seems that this is
the way to implement the defense you propose on the server.  I
would like to point out that this sort of thing has a high cost
and in turn makes DoS attacks simpler.

  - Dmitri.

> On Tue, Dec 04, 2018 at 10:23:11AM +0900, Kazuho Oku wrote:
> > Therefore, man-on-the-side attack-resistant Initial exchange becomes
> > practical:
> > * if the server considers different initial ClientHellos as belonging
> >       to different connections
> >
> > [...]
> >
> > First point is what PR #2076 tries to address.
> 
> I would like to understand what server is expected to do.  Let's say
> it has several connections that have the same SCID/DCID.  Now the
> second packet from the client comes in:
> 
>     Is the server to try each of its connection candidates in
>     turn to see which one successfully decrypts the packet?
> 
>   - Dmitri.