Skip to content

Commit

Permalink
More words on client validation of the server address
Browse files Browse the repository at this point in the history
  • Loading branch information
martinthomson committed Nov 9, 2020
1 parent 9f1c03c commit da21152
Showing 1 changed file with 8 additions and 3 deletions.
11 changes: 8 additions & 3 deletions draft-ietf-quic-transport.md
Expand Up @@ -1928,9 +1928,14 @@ consider the peer address to have been validated.

Additionally, an endpoint MAY consider the peer address validated if the peer
uses a connection ID chosen by the endpoint and the connection ID contains at
least 64 bits of entropy. For the client, the value of the Destination
Connection ID field in its first Initial packet also fulfills this requirement,
such that successfully processing any packet validates the server address.
least 64 bits of entropy.

For the client, the value of the Destination Connection ID field in its first
Initial packet allows it to validate the server address as a part of
successfully processing any packet. Initial packets from the server are
protected with keys that are derived from this value (see Section 5.2 of
{{QUIC-TLS}}). Alternatively, the value is echoed by the server in Retry and
Version Negotiation packets.

Prior to validating the client address, servers MUST NOT send more than three
times as many bytes as the number of bytes they have received. This limits the
Expand Down

0 comments on commit da21152

Please sign in to comment.