Re: [TLS] Problem with DTLS 1.2 handshake

2018-03-26 Thread Eric Rescorla
r > > > Jim > > > > > > *From:* Eric Rescorla > *Sent:* Monday, March 26, 2018 6:24 AM > *To:* Jim Schaad > *Cc:* > *Subject:* Re: [TLS] Problem with DTLS 1.2 handshake > > > > First, just for clarification, you mean the TLS record MAC on the F

Re: [TLS] Problem with DTLS 1.2 handshake

2018-03-26 Thread Jim Schaad
though. Jim From: Eric Rescorla Sent: Monday, March 26, 2018 6:24 AM To: Jim Schaad Cc: Subject: Re: [TLS] Problem with DTLS 1.2 handshake First, just for clarification, you mean the TLS record MAC on the Finished rather than the TLS Finished MAC, right? Assuming that is

Re: [TLS] Problem with DTLS 1.2 handshake

2018-03-26 Thread Eric Rescorla
First, just for clarification, you mean the TLS record MAC on the Finished rather than the TLS Finished MAC, right? Assuming that is correct, then I believe this is reasonable behavior. It makes the protocol somewhat more resistant to damaged bits on the wire. Note that QUIC takes this position ev