Skip to content

Commit

Permalink
Explain why you shouldn't retry
Browse files Browse the repository at this point in the history
  • Loading branch information
ekr committed May 27, 2024
1 parent 70bb82d commit 28786bd
Showing 1 changed file with 7 additions and 4 deletions.
11 changes: 7 additions & 4 deletions draft-ietf-tls-esni.md
Original file line number Diff line number Diff line change
Expand Up @@ -885,10 +885,13 @@ version was negotiated, the client can regard ECH as securely disabled
by the server, and it SHOULD retry the handshake with a new transport
connection and ECH disabled.

Clients SHOULD NOT accept "retry_config" in response to
a connection initiated in response to a "retry_config".
If a client does not retry, it MUST report an error to the
calling application.
Clients SHOULD NOT accept "retry_config" in response to a connection
initiated in response to a "retry_config". Sending a "retry_config"
in this situation is a signal that the server is misconfigured, e.g.,
the server might have multiple inconsistent configurations so that the
client reached a node with configuration A in the first connection and
a node with configuration B in the second. If a client does not retry,
it MUST report an error to the calling application.

### Authenticating for the Public Name {#auth-public-name}

Expand Down

0 comments on commit 28786bd

Please sign in to comment.