Ben Kaduk's TLS Comment 26

[LPardue]

@kaduk said:

Section 9.6

The initial secrets use a key that is specific to the negotiated QUIC
version. New QUIC versions SHOULD define a new salt value used in
calculating initial secrets.

Also for the Retry Integrity Tag key/nonce secret?

[martinthomson]

That does not have the same impetus, so I think that it is reasonable to omit it. Updating the keys would be OK and I would expect it to happen, but it is not necessary to the extent that it needs to be called out.