Skip to main content

The Datagram Transport Layer Security (DTLS) Connection Identifier
draft-ietf-tls-dtls-connection-id-00

The information below is for an old version of the document.
Document Type Expired Internet-Draft (tls WG)
Authors Eric Rescorla , Hannes Tschofenig , Thomas Fossati , Tobias Gondrom
Last updated 2018-06-30 (Latest revision 2017-12-27)
Replaces draft-rescorla-tls-dtls-connection-id
Stream Internet Engineering Task Force (IETF)
Formats
Expired & archived
plain text xml htmlized pdfized bibtex
Reviews
OPSDIR Last Call Review Incomplete, due 2021-03-28
Stream WG state WG Document
Document shepherd (None)
IESG IESG state Expired
Consensus boilerplate Unknown
Telechat date (None)
Responsible AD (None)
Send notices to (None)
This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at:
https://www.ietf.org/archive/id/draft-ietf-tls-dtls-connection-id-00.txt

Abstract

This document specifies the "Connection ID" concept for the Datagram Transport Layer Security (DTLS) protocol, version 1.2 and version 1.3. A Connection ID is an identifier carried in the record layer header that gives the recipient additional information for selecting the appropriate security association. In "classical" DTLS, selecting a security association of an incoming DTLS record is accomplished with the help of the 5-tuple. If the source IP address and/or source port changes during the lifetime of an ongoing DTLS session then the receiver will be unable to locate the correct security context.

Authors

Eric Rescorla
Hannes Tschofenig
Thomas Fossati
Tobias Gondrom

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)