3 ms·
Ironically TLS is not suited to TCP. TLS is record-based, and the stream-based TCP doesn’t have record boundaries. TLS-over-TCP solves this by sending TLS reco
by syncsynchalt 4y ago
Ironically TLS is not suited to TCP. TLS is record-based, and the stream-based TCP doesn’t have record boundaries.
TLS-over-TCP solves this by sending TLS records with a type-and-length byte header. QUIC uses UDP which is more record based, and sends TLS records encapsulated in QUIC packets.
- Matthias247 4y agoyes and no. The TLS records are transmitted in CRYPTO frames, which form a crypto stream (just like a TLS stream) that is more or less transparent to the QUIC stack. QUIC implementations forward an arbitrary datastream from the peer into the TLS library, and place the data that is produced by that stack again onto the ordered bytestream. There's no record layer for CRYPTO streams - that one would again be above on the TLS layer.