Subject: [rtcweb] draft-ietf-rtcweb-security-arch-09: DTLS 1.2 only?

From: Andrei Popov <[email-masked]>
Date: Wed, 16 Apr 2014 22:31:37 +0000

draft-ietf-rtcweb-security-arch-09. says:

" [[OPEN ISSUE:  Are these the right cipher suites?]]  All
   implementations MUST implement the following two cipher suites:
   TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 and
   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ..."

These are (D)TLS 1.2 cipher suites; I think this requirement would exclude DTLS 1.0 implementations. For easier/broader adoption, would it make sense to allow DTLS 1.0?

Cheers,

Andrei