I&#x27;m wondering if the 0-RTT mode brings any issues with DDoS attacks. Since the request is sent in the initial TLS request, the server must buffer it, or create a response before it finishes the handshake. Admittedly it&#x27;s not UDP, so you still need to successfully perform a TCP handshake (ie: verify the reverse path).