Subject: Re: [quicwg/base-drafts] Replay protection is the responsibility of application protocols (9400c2f)

From: MikkelFJ <[email-masked]>
Date: Wed, 06 Feb 2019 01:02:39 -0800

I think the application has a lot more useful information, but the application has no control over network configuration: it cannot see what lands on other endpoints, at least not without a heavy cost. So therefore, if we can truly enforce replay rejection at transport level, that would be a much saner approach, even if it places more restrictions on 0-RTT usage. While being safer against accidental mistakes, it also makes 0-RTT more useful, as you can do more things in 0-RTT.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/commit/9400c2f9b2c5a235ce15377538bc8dc354467f39#commitcomment-32209894