Subject: Re: [quicwg/base-drafts] Speed handshake recovery when only undecryptable packets arrive (#1414)

From: Marten Seemann <[email-masked]>
Date: Sat, 03 Nov 2018 00:13:47 -0700

There's another case where this is occurs.
Consider a server that has a really big cert. It first sends its Server Hello (which is lost), and then begins sending the certificate in Handshake packets (until it is blocked by the 3x limit). The client can't decrypt the Handshake packets, so at some point it will retransmit the Client Hello.
When receiving the second Client Hello, the server has no way to distinguish between the case described above (1.) , and the case where the RTT is so long that the client retransmits the Client Hello before any of the server's packets arrive (2.).

For 1., the server would want to retransmit the ServerHello. For 2. the server could use the additional bytes received to increase the 3x limit and continue sending the certificate.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/1414#issuecomment-435566489