No, but QUIC definitely falls in the overly complicated category, spanning multiple, large RFCs.
This attack is just about failing to enforce the negotiated parameters during the start phase of the connection.
This attack is just about failing to enforce the negotiated parameters during the start phase of the connection.