Hi Martin, Thanks for the comments. I've captured each comment as a new issue on the QUIC WG base-drafts Github repository and tagged you in each one [1], [2]. See in-line response for more details. We'll be tracking all IESG comments on the Transport document under https://github.com/quicwg/base-drafts/milestone/24
Cheers, Lucas On behalf of QUIC WG Chairs [1] - https://github.com/quicwg/base-drafts/issues/4465 [2] - https://github.com/quicwg/base-drafts/issues/4466 On Wed, Dec 23, 2020 at 2:42 AM Martin Duke <[email protected]> wrote: > The PRs look good! > > On Tue, Dec 22, 2020 at 4:44 PM Martin Thomson <[email protected]> wrote: > >> > Secondly, it is not clear to me what protection this offers beyond the >> DCID >> > field in the actual Retry Packet (which corresponds to the SCID of the >> Initial). >> >> The SCID of the Initial might be empty (it is in many cases), which >> doesn't provide enough entropy to prevent spoofing of Retry otherwise. >> >> > Yes, of course. Thanks. >
