On 13 Dec 2016, at 11:36, Paul Wouters wrote:
On Tue, 13 Dec 2016, Paul Hoffman wrote:
IPsec will always have worse characteristics for DOS than DTLS, and
probably worse than TLS.
[citation needed]
Amount of state needed to be kept on the server for each connection from
resolvers
As for other reasons that IPsec will have worse (or at best the same)
characteristics as (D)TLS 1.3:
- Number of round trips before data can be sent from the initiator
- Inability for parties to get the configuration wrong
--Paul Hoffman
_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy
