-
Notifications
You must be signed in to change notification settings - Fork 209
Testing the authentication of connection ID before draft 28
Christian Huitema edited this page Mar 22, 2020
·
4 revisions
PR #3499 introduces two new transport parameters:
- Handshake connection ID, set by each peer as source CID of Initial packets
- Retry CID, set by a server that sent a Retry to the source CID of the Retry packet.
We expect that the PR will be included in draft-28, but it is useful to do some tests by adding the code now to at least some implementations of draft 27. The expectations for the early testing are:
- Always send the handshake CID TP. This should not cause an interop issue since implementations are supposed to ignore unknown TP.
- Send the retry CID TP when also sending the ODCID.
- Verify that the client is not sending Retry CID TP.
- If negotiating draft 28 or later, or if the peer negotiated draft-27 and sent a "handshake CID" TP, perform all the checks specified in PR #349
- If receiving an Initial packet after sending a Retry, verify that the DCID matches the Retry CID.
The goal is to get some early deployment and verify the PR.