[TLS] Epochs for ACKs

2020-04-14 Thread Hanno Becker
Hi all, On ACK protection, DTLS 1.3 Draft 37 says in Section 7: ACK records MUST be sent with an epoch that is equal to or higher than the record which is being acknowledged. Implementations SHOULD simply use the current key. Since the update of incoming and outgoing keying material is

Re: [TLS] Epochs for ACKs

2020-04-19 Thread Eric Rescorla
I have posted a PR to clarify this: https://github.com/tlswg/dtls13-spec/pull/142 On Tue, Apr 14, 2020 at 1:13 AM Hanno Becker wrote: > Hi all, > > On ACK protection, DTLS 1.3 Draft 37 says in Section 7: > >ACK records MUST be sent with an epoch that is equal to or higher >than the recor

Re: [TLS] Epochs for ACKs

2020-04-20 Thread Hanno Becker
Hi Ekr, Great, thanks, I left comments on that PR. Cheers, Hano From: Eric Rescorla Sent: Sunday, April 19, 2020 10:39 PM To: Hanno Becker Cc: tls@ietf.org Subject: Re: [TLS] Epochs for ACKs I have posted a PR to clarify this: https://github.com/tlswg/dtls13