Potential implementation issues with 0-RTT in TLS 1.3
twitter.com