From 8c56d8db7e977f72aa312bf6ecdc56c75ef44cf7 Mon Sep 17 00:00:00 2001 From: Martin Thomson Date: Wed, 6 Jan 2021 17:25:43 +1100 Subject: [PATCH 1/2] Explain TLS/QUIC key update differences Closes #4497. --- draft-ietf-quic-tls.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/draft-ietf-quic-tls.md b/draft-ietf-quic-tls.md index 43ed620134..2d08b51978 100644 --- a/draft-ietf-quic-tls.md +++ b/draft-ietf-quic-tls.md @@ -1452,6 +1452,9 @@ without needing to receive the first packet that triggered the change. An endpoint that notices a changed Key Phase bit updates keys and decrypts the packet that contains the changed value. +Initiating a key updates results in both endpoints updating keys. This differs +from TLS where endpoints can update keys independently. + This mechanism replaces the key update mechanism of TLS, which relies on KeyUpdate messages sent using 1-RTT encryption keys. Endpoints MUST NOT send a TLS KeyUpdate message. Endpoints MUST treat the receipt of a TLS KeyUpdate From 9d42f066e9739beeb2c78c9231522f6c97054361 Mon Sep 17 00:00:00 2001 From: Martin Thomson Date: Thu, 7 Jan 2021 11:32:20 +1100 Subject: [PATCH 2/2] plural/not Co-authored-by: ianswett --- draft-ietf-quic-tls.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/draft-ietf-quic-tls.md b/draft-ietf-quic-tls.md index 2d08b51978..a9c673b520 100644 --- a/draft-ietf-quic-tls.md +++ b/draft-ietf-quic-tls.md @@ -1452,7 +1452,7 @@ without needing to receive the first packet that triggered the change. An endpoint that notices a changed Key Phase bit updates keys and decrypts the packet that contains the changed value. -Initiating a key updates results in both endpoints updating keys. This differs +Initiating a key update results in both endpoints updating keys. This differs from TLS where endpoints can update keys independently. This mechanism replaces the key update mechanism of TLS, which relies on