diff --git a/draft-ietf-quic-transport.md b/draft-ietf-quic-transport.md index ba0266a7dc..b3c8a85366 100644 --- a/draft-ietf-quic-transport.md +++ b/draft-ietf-quic-transport.md @@ -2179,7 +2179,7 @@ amplification attack. Attackers could replay tokens to use servers as amplifiers in DDoS attacks. To protect against such attacks, servers MUST ensure that replay of tokens is prevented or limited. Servers SHOULD ensure that tokens sent in Retry packets -are only accepted for a short time, as they are retuned immediately by clients. +are only accepted for a short time, as they are returned immediately by clients. Tokens that are provided in NEW_TOKEN frames ({{frame-new-token}}) need to be valid for longer, but SHOULD NOT be accepted multiple times. Servers are encouraged to allow tokens to be used only once, if possible; tokens MAY