Subject: [quicwg/base-drafts] bbef7a: Tokens are a mess

From: Martin Thomson <[email-masked]>
Date: Mon, 27 Aug 2018 22:13:56 -0700

Branch: refs/heads/master
  Home:   https://github.com/quicwg/base-drafts
  Commit: bbef7aab87ea8992e4824e8c45889561ce8b42d3
      https://github.com/quicwg/base-drafts/commit/bbef7aab87ea8992e4824e8c45889561ce8b42d3
  Author: Martin Thomson <[email-masked]>
  Date:   2018-08-27 (Mon, 27 Aug 2018)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Tokens are a mess

We can't realistically authenticate all tokens with up to three Retry
packets and the NEW_TOKEN message.  So they aren't really safe for much.
Describe the limitations and advise a very narrow usage.

I really hope that this choice doesn't bite us later.  It doesn't feel
that good, but I don't know how to fix this without going back to just
one Retry (and even then a solution would be ugly).

Closes #1647.

  Commit: c86245ca9c3483d9228146510bea50a84fefb653
      https://github.com/quicwg/base-drafts/commit/c86245ca9c3483d9228146510bea50a84fefb653
  Author: Martin Thomson <[email-masked]>
  Date:   2018-08-28 (Tue, 28 Aug 2018)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  unsplit crypto graphic

  Commit: 259c3ef07da71b43a97886cc1cf0f548c31c3f16
      https://github.com/quicwg/base-drafts/commit/259c3ef07da71b43a97886cc1cf0f548c31c3f16
  Author: Martin Thomson <[email-masked]>
  Date:   2018-08-28 (Tue, 28 Aug 2018)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Merge pull request #1704 from quicwg/token-porpoise

Tokens are a mess

Compare: https://github.com/quicwg/base-drafts/compare/a1264b2274cd...259c3ef07da7
      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.