What is the state of a connection with only administratively prohibited candidates?

[alvestrand]

This came up in connection with a situation where MDNS is blocked, but may have wider relevance.

The spec says:

A candidate is administratively prohibited if the UA has decided not to allow connection attempts to this address.

For privacy reasons, there is no indication to the developer about whether or not an address/port is blocked; it behaves exactly as if there was no response from the address.

The UA MUST prohibit connections to addresses on the [Fetch] block bad port list, and MAY choose to prohibit connections to other addresses.

If all candidates are administratively prohibited, what is the state of the connection? New or Connecting? Does it ever go to Failed state?

(At the moment, I think it remains in New state)

Chromium bug: https://crbug.com/1447957

[fippo]

I'd say new. If you can't resolve the host name of the mdns candidate you can't form a pair.