[[exception]] target = "https://www.rfc-editor.org/rfc/rfc9001#section-6.2" quote = ''' An endpoint MAY treat such consecutive key updates as a connection error of type KEY_UPDATE_ERROR. ''' reason = ''' Returning this error would indicate that a key update is in progress, revealing information about the state of the connection. ''' [[exception]] target = "https://www.rfc-editor.org/rfc/rfc9001#section-6.2" quote = ''' An endpoint that receives an acknowledgement that is carried in a packet protected with old keys where any acknowledged packet was protected with newer keys MAY treat that as a connection error of type KEY_UPDATE_ERROR. ''' reason = ''' We allow packets protected with older keys to be received for 1 PTO, then we derive a new key which prevents us from decrypting the old packets. '''