On Tue, Mar 13, 2018 at 8:06 AM, Mirja Kuehlewind (IETF)
> Just to double-check, there is also no requirement or maybe recommend to not
> send cleartext and 0-RTT data in the same packet?
You mean in the same TCP segment? We do nothing to prevent that, and
nor should we. It would mess with intended uses of TCP fast open. In
DTLS, that extends to having a ClientHello and 0-RTT in the same UDP
datagram, which is permitted and similarly beneficial.
TLS mailing list