It could be useful to clarify more precisely what can be prevented with the QUIC implementation that encrypts the Client/Server Hello messages. It’s not clear why adding this computation can be useful if any QUIC implementation (including in middleboxes) can decrypt the messages. A short explanation of what types of interferences can be avoided with this implementation (for what I read mainly ossification and tampering) could be interesting. If this is outside the course scope maybe just add some links in footnotes for those who seek more information.