[TLS] DTLS and large messages

["t.petch" <[e-mail]>]

How may an application send a 64kbyte (less headers) message over DTLS, assuming
that the substrate is UDP and that UDP can carry 64kbyte datagrams without
fragmentation?

A usually reliable source has surprised me on two counts:

First, I am told that when rfc4347-bis says
"As in TLS
       1.2, the length should not exceed 2^14.
"
then that is the authors' way of saying
"As in TLS 1.2, the length MUST NOT exceed 2^14."
which I had not guessed.

Second, that DTLS will break up the message into fragments of 2**14 or less but
will then place them in a single UDP datagram so that they will transit the
network as one, and can be safely reassembled at the far end.

Thoughts?

Tom Petch