search

tlswg / tls13-spec

TLS 1.3 Specification
563 stars 159 forks source link

AEAD limits for early data #1256

Closed martinthomson closed 2 years ago

martinthomson commented 2 years ago

See https://github.com/tlswg/dtls13-spec/issues/260

For sending, we should require that a client stop sending more 0-RTT before they hit the limit (this means EOED needs to be sent within the limit, so they need to reserve some space). We might note that most of the current limits for writing are larger than the largest value for max_early_data, so this is unlikely to be necessary.

For receiving, we should require that a server track failed decryptions against the per-connection limit, noting that this only applies to DTLS.

ekr commented 2 years ago

The first chunk is there and I think that the appropriate text is in 9147, so closing.

@martinthomson feel free to object.