Re: draft-dtls-sdp: Allow offerer to establish DTLS association before it has received the SDP answer?

Hi,

You are the DTLS gurus - please suggest changes that makes the text
correct - and still hopefully keeps Cullen happy :)

Regards,

Christer


On 26/05/17 14:01, "Martin Thomson" <[email protected]> wrote:

>On 26 May 2017 at 20:37, Eric Rescorla <[email protected]> wrote:
>> Also, you say that if you initiate the handshake before the answer
>> is received you are vulnerable to attacks. What attacks are those?
>
>It should be "complete" - on the assumption that a completed handshake
>leads immediately to using the connection.  Really, it's using the
>connection (sending or receiving data or using exporters) that puts
>you at risk, but I don't think that it's worth putting that fine a
>distinction on it.