Subject: [rtcweb] DTLS requirements

From: Martin Thomson <[email-masked]>
Date: Tue, 3 Feb 2015 13:03:21 -0800

The current security architecture mandates *both* DTLS 1.0 and 1.2.
At the last meeting we agreed MUST 1.0, SHOULD 1.2 [1].

Also, I think that the only elliptic curve feature that is risky is
ECDSA, not ECDHE.  I'm going to propose that we move to ECDHE.

    https://github.com/rtcweb-wg/security-arch/pull/19

In addition to that change, I would also like to propose that we
*require* a forward-secrecy-capable cipher suite.

    https://github.com/rtcweb-wg/security-arch/pull/20

[1] https://tools.ietf.org/wg/rtcweb/minutes?item=minutes-91-rtcweb.html