Re: draft-dtls-sdp: Allow offerer to establish DTLS association before it has received the SDP answer?

Martin Thomson <[email protected]>
Newsgroups gmane.ietf.mmusic
Message-ID <CABkgnnXXCj55+f0pG0_5PeAB0GMi3m4EdgPUFFv2=-07uxb_Yw@mail.gmail.com> 
On 26 May 2017 at 20:37, Eric Rescorla <[email protected]> wrote:
> Also, you say that if you initiate the handshake before the answer
> is received you are vulnerable to attacks. What attacks are those?

It should be "complete" - on the assumption that a completed handshake
leads immediately to using the connection.  Really, it's using the
connection (sending or receiving data or using exporters) that puts
you at risk, but I don't think that it's worth putting that fine a
distinction on it.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.