[TLS] draft-ietf-tls-renegotiation-01.txt and DTLS

[Michael Tüxen <[e-mail]>]

Dear all,

I would like to get the relation of the RI Extension and DTLS clarified.

If I'm not wrong, then the attack which works against TLS does not
work against DTLS, since DTLS has an epoch counter.

If a client tries to establish a DTLS connection and a MITM intercepts
it, establishes itself a DTLS connection, the epoch is 1. There will be
a final mismatch in the epoch and the packets will be discarded. When
using the RI extension one could enforce the sending of the alert message.
But the original attack is not possible, I think.

Is my analysis correct or am I overlooking something?

If I'm right, is the alert worth using the RI also for DTLS?

Can we add a statement to draft-ietf-tls-renegotiation-01.txt clearly
stating that the RI MUST also be used for DTLS or MUST NOT be used.

Best regards
Michael