> machines will simply try TCP and RDMA like always, but then wait briefly and try QUIC too. This means if they can get faster perf on a local network with RDMA

> machines will simply try TCP and RDMA like always, but then wait briefly and try QUIC too. This means if they can get faster perf on a local network with RDMA or unencrypted TCP, they will. Is this just me, or is this kind of fallback completely insane, security-wise? If I own the internet connection, I just need to block QUIC port and listen on SMB instead - and I get unencrypted link and full MITM opportunity. “All seamless to the end user and their apps.”