It could be useful to clarify more precisely what can be prevented with the QUIC implementation that encrypts the Client/Server Hello messages. It’s not clear why adding this computation can be useful if any QUIC implementation (including in middleboxes) can decrypt the messages. A short explanation of what types of interferences can be avoided with this implementation (for what I read mainly ossification and tampering) could be interesting. If this is outside the course scope maybe just add some links in footnotes for those who seek more information.
It could be useful to clarify more precisely what can be prevented with the QUIC implementation that encrypts the Client/Server Hello messages. It’s not clear why adding this computation can be useful if any QUIC implementation (including in middleboxes) can decrypt the messages. A short explanation of what types of interferences can be avoided with this implementation (for what I read mainly ossification and tampering) could be interesting. If this is outside the course scope maybe just add some links in footnotes for those who seek more information.