A question about retry token format

[Lingtaonju]

In following Figure 6: Cleartext format of shared-state retry tokens , the token format only encode original dcid and retry scid, but not initial scid.

As in the transport draft, it describes that all these three cids are carried in the transport parameters for Authenticating:

[martinduke]

If you read it carefully, I think you'll see that this information isn't necessary in the token. The server needs S1, S2, and S3. S1 is the ODCID field. S2 is the RSCID field. S3 is the source connection ID it uses in the Initial it sends in response to the token! It is not even generated until the Retry token has been processed.