Hacker News Reader

Do you want to maintain a state machine for each QUIC-SSH session 1-N pairing? Or worse, M-N pairing?

Yes. The attack surface would be much smaller.

Why not have 1:1 relationship between QUIC connection IDs and open SSH sessions?

Profiling ... of SSH sessions at QUIC level, that's why we shouldn't do 1:1 mapping between QUIC session and SSH session.