diff --git a/draft-ietf-quic-transport.md b/draft-ietf-quic-transport.md index 553cd9e8ce..cb86f995d7 100644 --- a/draft-ietf-quic-transport.md +++ b/draft-ietf-quic-transport.md @@ -2743,10 +2743,11 @@ An endpoint is allowed to drop the packet protection keys when entering the closing period ({{draining}}) and send a packet containing a CONNECTION_CLOSE in response to any UDP datagram that is received. However, an endpoint without the packet protection keys cannot identify and discard invalid packets. To avoid -creating an unwitting amplification attack, such endpoints MUST reduce the -frequency with which it sends packets containing a CONNECTION_CLOSE frame. To -minimize the state that an endpoint maintains for a closing connection, -endpoints MAY send the exact same packet. +creating an unwitting amplification attack, such endpoints MUST limit the +cumulative size of packets containing a CONNECTION_CLOSE frame to 3 times the +cumulative size of the packets that cause those packets to be sent. To minimize +the state that an endpoint maintains for a closing connection, endpoints MAY +send the exact same packet. Note: