Subject: [quicwg/base-drafts] Correlating connection ids (#2084)

From: ekr <[email-masked]>
Date: Fri, 30 Nov 2018 18:10:44 -0800

S 5.1. says

```
Connection IDs MUST NOT contain any information that can be used by to correlate
them with other connection IDs for the same connection.  As a trivial example,
this means the same connection ID MUST NOT be issued more than once on the same
connection.
```

At minimum this needs to be restricted to endpoints and other elements associated with them (like load balancers) because they need to be able to correlate connection IDs. But this is also a very strong condition, and in some cases will basically mandate encryption.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2084