feedback

Author: JackDoan

e2e/tunnels_test.go

@@ -237,7 +237,7 @@ func TestCertDowngrade(t *testing.T) {
 		}
 		since := time.Since(waitStart)
 		if since > time.Second*5 {
-			r.Log("wtf")
+			r.Log("it is unusual that the cert is not new yet, but not a failure yet")
 		}
 		if since > time.Second*10 {
 			r.Log("wtf")

handshake_ix.go

@@ -28,7 +28,7 @@ func ixHandshakeStage0(f *Interface, hh *HandshakeHostInfo) bool {
 	if hh.initiatingVersionOverride != cert.VersionPre1 {
 		v = hh.initiatingVersionOverride
 	} else if v < cert.Version2 {
-		// If we're connecting to a v6 address we must use a v2 cert
+		// If we're connecting to a v6 address we should encourage use of a V2 cert
 		for _, a := range hh.hostinfo.vpnAddrs {
 			if a.Is6() {
 				v = cert.Version2