Re: [TLS] [xLS 1.3: cookie] - DTLS queries

Hi Ben, thanks for your remark. I don't think that this is an issue in DTLS since the epoch field provides additional information to properly select the correct key. Ciao Hannes On 04/20/2017 04:34 PM, Benjamin Kaduk wrote: > On 04/20/2017 01:22 AM, Hannes Tschofenig wrote: >> >> On 04/19/2017 0

Re: [TLS] [xLS 1.3: cookie] - DTLS queries

On 04/20/2017 01:22 AM, Hannes Tschofenig wrote: > > On 04/19/2017 07:07 PM, Mark Dunn wrote: >> >> I understand an HRR cookie should cause an extra round trip, but in this >> case because of >> "DTLS servers SHOULD perform a cookie exchange whenever a new >> handshake is being performed" >

Re: [TLS] [xLS 1.3: cookie] - DTLS queries

Hi Mark, thanks for your review. A few remarks below. On 04/19/2017 07:07 PM, Mark Dunn wrote: > > > On 29/03/17 15:29, Eric Rescorla wrote: >> Hi Mark, >> >> Thanks for your note. Some comments below... >> >> >> On Wed, Mar 29, 2017 at 8:10 AM, Mark Dunn >> >

Re: [TLS] [xLS 1.3: cookie] - DTLS queries

On 29/03/17 15:29, Eric Rescorla wrote: Hi Mark, Thanks for your note. Some comments below... On Wed, Mar 29, 2017 at 8:10 AM, Mark Dunn > wrote: I am trying to implement cookie and finding it a little underspecified. I am using t

Re: [TLS] xLS 1.3: cookie

Hi Mark, Thanks for your note. Some comments below... On Wed, Mar 29, 2017 at 8:10 AM, Mark Dunn < mark.d...@objectiveintegration.uk> wrote: > I am trying to implement cookie and finding it a little underspecified. > > I am using the TLS 1.3 specified in github and > draft-rescorla-tls-dtls

[TLS] xLS 1.3: cookie

I am trying to implement cookie and finding it a little underspecified. I am using the TLS 1.3 specified in github and draft-rescorla-tls-dtls13-01 1a)Should a client expect to respond to a cookie during session resumption? It seems unlikelyas it would kill 0-RTT, and I am not sure