-
Notifications
You must be signed in to change notification settings - Fork 205
Testing the authentication of connection ID before draft 28
David Schinazi edited this page Mar 23, 2020
·
3 revisions
PR #3499 introduces two new transport parameters:
-
handshake_connection_id
, set by each peer as source CID of Initial packets -
retry_connection_id
, set by a server that sent a Retry to the source CID of the Retry packet.
We expect that the PR will be included in draft-28, but it is useful to do some tests by adding the code now to at least some implementations of draft-27. Note that sending new transport parameters should not cause interop issues since implementations are supposed to ignore unknown TPs. The expectations for the early testing are:
- Always send the
handshake_connection_id
TP. - Send the
retry_connection_id
TP when required by PR #3499. - Verify that the client is not sending
retry_connection_id
TP. - If the peer sent a
handshake_connection_id
TP, perform all the checks specified in PR #3499. - If receiving an Initial packet after sending a Retry, verify that the DCID matches the Retry CID.
- If receiving
original_connection_id
from the server, verify that it matches even if no retry was received.
The goal is to get some early deployment and verify the PR.