Subject: Re: [core] DTLS and Epochs
From: Carsten Bormann <[email-masked]>
To: Jim Schaad <[email-masked]>
Cc: weigengyu <[email-masked]>, Klaus Hartke <[email-masked]>, [email-masked]
Date: Thu, 1 Jun 2017 18:36:23 +0200
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>

On Jun 1, 2017, at 18:10, Jim Schaad <[email-masked]> wrote:
> 
> Please note - I did not say that the epoch was not changed, I said that it does not tell me that the epoch has changed.  From a strictly security point of view there is no reason to do so if, for example, the epoch changed just because the key was rolled over.

Right, and the question for me is:  How do we get from the overly restrictive spec in 7252 to something that is still secure and can be supported by TLS libraries that are out there.

Grüße, Carsten