Ah, I confused the hierarchy between TLS and TCP. I thought the acks were protected by TLS, but they are not. There are still timeout issues with the buffering

Ah, I confused the hierarchy between TLS and TCP. I thought the acks were protected by TLS, but they are not. There are still timeout issues with the buffering, but it is a lot weaker defense.