make the peer completing the handshake last send a forward-secure packet
make the peer completing the handshake last send a forward-secure packet

In gQUIC, the server completes the handshake first (after sending the
SHLO). In TLS 1.3, the client completes the handshake first (after
sending the CFIN).
They need to have some way to learn that the peer successfully completed
the handshake, so they can stop retransmitting the handshake packets
containing the SHLO or the CFIN, respectively. To achieve that, the peer
finishing the handshake last will send a PING frame in a forward-secure
packet.

konnykonny50/quic-go,lucas-clemente/quic-go,lucas-clemente/quic-go,konnykonny50/quic-go