diff --git a/draft-ietf-quic-transport.md b/draft-ietf-quic-transport.md index 1bee212f4d..81752a8c2b 100644 --- a/draft-ietf-quic-transport.md +++ b/draft-ietf-quic-transport.md @@ -606,9 +606,9 @@ Server Stateless Retry packet. After receiving a Server Stateless Retry packet, the client uses a new Client Initial packet containing the next cryptographic handshake message. The client retains the state of its cryptographic handshake, but discards all transport -state. In effect, the next cryptographic handshake message is sent on a new -connection. The new Client Initial packet is sent in a packet with a newly -randomized packet number and starting at a stream offset of 0. +state. The new Client Initial packet includes a newly randomized packet number, +STREAM frames on stream 0 that start again at an offset of 0, and the original +connection ID. Continuing the cryptographic handshake is necessary to ensure that an attacker cannot force a downgrade of any cryptographic parameters. In addition to