7. Security Considerations

The security considerations are the same as for other sender-based CC methods. These methods rely on the receiver appropriately acknowledging receipt of data. The ability of an on-path or off-path attacker to influence CC depends on the security properties of the transport protocol being used.

Saved CC parameters are performance state, but incorrect or attacker-influenced state can cause unsafe startup behavior. Implementations should protect retained state from inappropriate reuse, stale Lifetime, path mismatch, and concurrent use by more than one connection.