Re: [tsvwg] Regarding DTLS and UDP options

[Gorry Fairhurst <[e-mail]>]

Thanks Joe,

That seems to be exactly the question the WG asked to explore. I agree 
your next update should add a small susbsection on how DTLS should be 
handled.

Gorry

On 15/04/2017, 00:56, Joe Touch wrote:
> Hi, all,
>
> Christian Huitema a question about the interaction between DTLS and UDP
> options during my remote presentation at IETF 98.
>
> I took a closer look and consulted with Eric Rescorla (DTLS author). He
> and I agreed as follows:
> - DTLS would currently not cover UDP options; DTLS protects only the UDP
> payload
> - the situation is analogous to TCP options, which are not covered by TLS
> I.e., both TLS and DTLS are transport *payload* security only, despite
> their names.
>
> Christian noted that this may be a reason QUIC prefers UDP (to avoid the
> need to protection transport options), however QUIC does not (and
> cannot) deprecate UDP payloads that are smaller than the IP payload.
> That would require a change to RFC 768.
>
> I'll add a clarification on this point to the next rev of the UDP
> options document.
>
> Joe