[tsvwg] Regarding DTLS and UDP options

[Joe Touch <[e-mail]>]

Hi, all,

Christian Huitema a question about the interaction between DTLS and UDP
options during my remote presentation at IETF 98.

I took a closer look and consulted with Eric Rescorla (DTLS author). He
and I agreed as follows:
- DTLS would currently not cover UDP options; DTLS protects only the UDP
payload
- the situation is analogous to TCP options, which are not covered by TLS
I.e., both TLS and DTLS are transport *payload* security only, despite
their names.

Christian noted that this may be a reason QUIC prefers UDP (to avoid the
need to protection transport options), however QUIC does not (and
cannot) deprecate UDP payloads that are smaller than the IP payload.
That would require a change to RFC 768.

I'll add a clarification on this point to the next rev of the UDP
options document.

Joe