tree 5496b7a0689998ac5780c31ba066c94f728a3edb
parent 8212c45924e356cea0bc43acde1826aafa11e493
author nharper <nharper@google.com> 1591385658 -0700
committer Copybara-Service <copybara-worker@google.com> 1591385688 -0700

Discard server 0-RTT read key when QUIC TLS handshake completes

Once the handshake is complete (i.e. the server has received the client's
Finished message), there shouldn't be any more messages in flight from the
client under the 0-RTT keys. If a lost 0-RTT packet eventually arrives late
(after the Finished), the server now won't be able to decrypt it, and
instead will need to wait for the retransmission to arrive (which is
presumably already en route).

Protected by disabled flag quic_enable_zero_rtt_for_tls

PiperOrigin-RevId: 314976141
Change-Id: I4b668e79795a942c7cec08a3cfb8085b182df781