msquic icon indicating copy to clipboard operation
msquic copied to clipboard

Embed the QUIC version into address validation tokens

Open anrossi opened this issue 2 years ago • 0 comments

Describe the bug

This will enable servers to validate that clients haven't change their QUIC version between receiving the token and the subsequent connection attempt.

Affected OS

  • [X] All
  • [ ] Windows Server 2022
  • [ ] Windows 11
  • [ ] Windows Insider Preview (specify affected build below)
  • [ ] Ubuntu
  • [ ] Debian
  • [ ] Other (specify below)

Additional OS information

No response

MsQuic version

main

Steps taken to reproduce bug

  1. Client gets address validation token
  2. Client changes QUIC version
  3. Client attempts to connect to server again with address validation token

Expected behavior

Connection attempt should fail

Actual outcome

Connection attempt succeeds.

Additional details

No response

anrossi avatar Mar 25 '22 19:03 anrossi