From d1870b8d6699e9253bff9f395db496d2ab8eef71 Mon Sep 17 00:00:00 2001 From: Martin Thomson Date: Mon, 7 Dec 2020 21:00:54 +1100 Subject: [PATCH] don't use unless requested Co-authored-by: Jana Iyengar --- draft-ietf-quic-tls.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/draft-ietf-quic-tls.md b/draft-ietf-quic-tls.md index 553de13581..c9452abc8b 100644 --- a/draft-ietf-quic-tls.md +++ b/draft-ietf-quic-tls.md @@ -1283,8 +1283,8 @@ carry application data. Application data that is received in 0-RTT could cause an application at the server to process the data multiple times rather than just once. Additional actions taken by a server as a result of processing replayed application data could have unwanted consequences. A client therefore -MUST only use 0-RTT for application data that is permitted by the application -that is in use. +MUST NOT use 0-RTT for application data unless specifically +requested by the application that is in use. An application protocol that uses QUIC MUST include a profile that defines acceptable use of 0-RTT; otherwise, 0-RTT can only be used to carry QUIC frames