From 2eba476031b4d2aa7ab0f8388696378b044ad02f Mon Sep 17 00:00:00 2001
From: hai007 <hais@google.com>
Date: Tue, 10 Aug 2021 21:19:16 -0700
Subject: [PATCH] Client is able to send payload when the connection
 unencrypted, for example, NC allow client to send payload to multiple
 endpoints when at least one endpoint encrypted, it's a security leak that
 sending data to other unencrypted endpoint. Reject to send unencrypted data
 in PayloadManager to fix this.

PiperOrigin-RevId: 390047577
---
 proto/connections_enums.proto | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/proto/connections_enums.proto b/proto/connections_enums.proto
index e114119b..8ad75e93 100644
--- a/proto/connections_enums.proto
+++ b/proto/connections_enums.proto
@@ -171,6 +171,9 @@ enum PayloadStatus {
 
   // The payload was canceled by the remote endpoint.
   REMOTE_CANCELLATION = 8;
+
+  // The connection not encrypted yet.
+  ENDPOINT_UNENCRYPTED = 9;
 }
 
 // next_id: 19