diff --git a/draft-ietf-quic-invariants.md b/draft-ietf-quic-invariants.md index 66ccd5df62..91f209e340 100644 --- a/draft-ietf-quic-invariants.md +++ b/draft-ietf-quic-invariants.md @@ -313,7 +313,7 @@ reliably extracting information from a flow based on version-specific traits requires that middleboxes retain state for every connection ID they see. The Version Negotiation packet described in this document is not -integrity-protected, it only has modest protection against insertion by off-path +integrity-protected; it only has modest protection against insertion by off-path attackers. QUIC versions MUST define a mechanism that authenticates the values it contains.