msquic
msquic copied to clipboard
Embed the QUIC version into address validation tokens
Describe the bug
This will enable servers to validate that clients haven't change their QUIC version between receiving the token and the subsequent connection attempt.
Affected OS
- [X] All
- [ ] Windows Server 2022
- [ ] Windows 11
- [ ] Windows Insider Preview (specify affected build below)
- [ ] Ubuntu
- [ ] Debian
- [ ] Other (specify below)
Additional OS information
No response
MsQuic version
main
Steps taken to reproduce bug
- Client gets address validation token
- Client changes QUIC version
- Client attempts to connect to server again with address validation token
Expected behavior
Connection attempt should fail
Actual outcome
Connection attempt succeeds.
Additional details
No response