Skip to content

Commit

Permalink
Refine token use and reuse constraints
Browse files Browse the repository at this point in the history
  • Loading branch information
martinthomson committed Jul 9, 2018
1 parent 19174cf commit 21f9ba5
Showing 1 changed file with 12 additions and 6 deletions.
18 changes: 12 additions & 6 deletions draft-ietf-quic-transport.md
Original file line number Diff line number Diff line change
Expand Up @@ -733,12 +733,18 @@ If the client has a token received in a NEW_TOKEN frame on a previous connection
to what it believes to be the same server, it can include that value in the
Token field of its Initial packet.

A client SHOULD NOT reuse a token. Reusing a token on different network paths
would allow activity to be linked between paths (see {{migration-linkability}}).
A client MUST NOT reuse a token if it believes that its point of network
attachment has changed; that is, if there is a change in its local IP address or
network interface. A client needs to start the connection process over if it
migrates prior to completing the handshake.
A token allows a server to correlate activity between connections.
Specifically, the connection where the token was issued, and any connection
where it is used. Clients that want to break continuity of identity with a
server MAY discard tokens provided using the NEW_TOKEN frame. Tokens obtained
in Retry packets MUST NOT be discarded.

A client SHOULD NOT reuse a token. Reusing a token on allows connections to be

This comment has been minimized.

Copy link
@mikkelfj

mikkelfj Jul 9, 2018

Contributor

missing words

This comment has been minimized.

Copy link
@martinthomson

martinthomson Jul 9, 2018

Author Member

An extra "on", more like. Thanks.

linked by entities on the network path (see {{migration-linkability}}). A
client MUST NOT reuse a token if it believes that its point of network
attachment has changed since the token was last used; that is, if there is a
change in its local IP address or network interface. A client needs to start
the connection process over if it migrates prior to completing the handshake.

If the client received a Retry packet from the server and sends an Initial
packet in response, then it sets the Destination Connection ID to the value from
Expand Down

0 comments on commit 21f9ba5

Please sign in to comment.