* I disagree that any particular retry behavior should be mandated. Clients that want wide interoperability will implement retry without ECH whether or not the spec says it's a MUST, and likewise clients that will only connect if ECH is used will choose to not implement the fallback regardless of what the spec says.
Yes!!!
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
