Re: Consensus Calls for Transport/TLS issues, post-Cupertino

[Kazuho Oku <[e-mail]>]

2019年10月22日(火) 11:38 Martin Thomson <[e-mail]>:

> On Tue, Oct 22, 2019, at 12:39, Nick Banks wrote:
> >  I'd also prefer to fix the problem, even if it means bringing back
> > something like RETIRE_KEY.
>
> I would prefer to think of this proposed resolution as a temporary one.  I
> don't think that we agreed to keep the handshake keys indefinitely, only
> that we would use that option as a fallback position until we found a
> better solution.
>

I might point out that #3121 is not proposal-ready as a way to resolve
#2863. That is because it does not define how to send and receive Handshake
packets until or after migration happens. There would be a deadlock unless
both endpoints agree on how that should be done (e.g., how to select SCID,
whether the path used for Handshake packets migrates too).

Without that being clarified, can we say that we are ready for a
consensus call?


>
> On that basis, I think that it would be best if we open a new issue that
> says "Handshake keys can't ever be dropped".
>
> We might still conclude not to address that issue, but the important thing
> is to ensure that any solution works properly.
>
>

-- 
Kazuho Oku