Index: net/quic/crypto/crypto_server_config.h |
diff --git a/net/quic/crypto/crypto_server_config.h b/net/quic/crypto/crypto_server_config.h |
index 7799fdd5829ee5780dc2e6f3f47e2702539a7c1c..a37c914495eef950e6643252376ba31d9bb24ab5 100644 |
--- a/net/quic/crypto/crypto_server_config.h |
+++ b/net/quic/crypto/crypto_server_config.h |
@@ -140,6 +140,21 @@ class NET_EXPORT_PRIVATE QuicCryptoServerConfig { |
// source-address token will be valid for. |
void set_source_address_token_lifetime_secs(uint32 lifetime_secs); |
+ // set_server_nonce_strike_register_max_entries sets the number of entries in |
+ // the server-nonce strike-register. This is used to record that server nonce |
+ // values have been used. If the number of entries is too small then clients |
+ // which are depending on server nonces may fail to handshake because their |
+ // nonce has expired in the amount of time it took to go from the server to |
+ // the client and back. |
+ void set_server_nonce_strike_register_max_entries(uint32 max_entries); |
+ |
+ // set_server_nonce_strike_register_window_secs sets the number of seconds |
+ // around the current time that the server-nonce strike-register will accept |
+ // nonces from. Setting a larger value allows for clients to delay follow-up |
+ // client hellos for longer and still use server nonces as proofs of |
+ // uniqueness. |
+ void set_server_nonce_strike_register_window_secs(uint32 window_secs); |
+ |
private: |
friend class test::QuicCryptoServerConfigPeer; |