Comment 11 for bug 57091

>"...option causes the system to violate the TCP standard..."

I do not think this is the case. If you check RFC4732 they list this as a possible way to help against DoS attacks.

I also believe that window scaling is not affected, but large windows are. But accepting legit traffic without large windows is better than dropping the connections.

So if the implementation is an adaptive one that only use SYN cookies when under huge load, then I am all for this. At least in the server edition.