DOTS Client DOTS Server ClientHello (0-RTT DOTS signal message) --------> ServerHello {EncryptedExtensions} {Finished} <-------- [DOTS signal message] (end_of_early_data) {Finished} --------> [DOTS signal message] <-------> [DOTS signal message] Note that: () Indicates messages protected 0-RTT keys {} Indicates messages protected using handshake keys [] Indicates messages protected using 1-RTT keys