Hi Juliusz,
TLS 1.3 changed the handshake, making false start irrelevant.
In 1.3, the first flight of server-client packets contains the Finished message,
so there is no opportunity to start early as there is in 1.2.
David
On Sat, Feb 2, 2019 at 10:17 AM Juliusz Chroboczek <jch@xxxxxxx> wrote:
> 6) AppA - I think you might need to tweak the last sentence in light 1.3?
> Unfortunately DTLS 1.3 hasn't been published yet,
May I most humbly request an explanation? Is that about TLS False Start
being made obsolete by TLS 1.3?
(Note that I'm not particularly convinced about this paragraph, since
I don't think that paying one extra RTT at neighbour acquisition is at all
prohibitive.)
-- Juliusz