Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minor editorializing of CID authentication #3732

Merged
merged 2 commits into from Jun 6, 2020
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
24 changes: 15 additions & 9 deletions draft-ietf-quic-transport.md
Expand Up @@ -1638,15 +1638,21 @@ Initial: DCID=S2, SCID=C1 ->
~~~
{: #fig-auth-cid-retry title="Use of Connection IDs in a Handshake with Retry"}

For the handshakes in {{fig-auth-cid}} and {{fig-auth-cid-retry}} the client
sets the value of the initial_source_connection_id transport parameter to `C1`.
In {{fig-auth-cid-retry}}, the server sets original_destination_connection_id
to `S1`, retry_source_connection_id to `S2`, and initial_source_connection_id
to `S3`. In {{fig-auth-cid}}, the server sets
original_destination_connection_id to `S1`, initial_source_connection_id to
`S3`, and does not include retry_source_connection_id. Each endpoint validates
the transport parameters set by their peer, including the client confirming
that retry_source_connection_id is absent if no Retry packet was processed.
In both cases ({{fig-auth-cid}} and {{fig-auth-cid-retry}}), the client sets the
value of the initial_source_connection_id transport parameter to `C1`.

When the handshake does not include a Retry ({{fig-auth-cid}}), the server sets
original_destination_connection_id to `S1` and initial_source_connection_id to
`S3`. In this case, the server does not include a retry_source_connection_id
transport parameter.

When the handshake includes a Retry ({{fig-auth-cid-retry}}), the server sets
original_destination_connection_id to `S1`, retry_source_connection_id to `S2`,
and initial_source_connection_id to `S3`.

Each endpoint validates transport parameters set by the peer. The client
confirms that the retry_source_connection_id transport parameter is absent if it
did not process a Retry packet.


## Transport Parameters {#transport-parameters}
Expand Down