<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<span class="">Hi,</span><span class=""><br class="">
</span><span class=""><br class="">
</span><span class="">The Datagram Transport Layer Security (DTLS) Protocol Version 1.3 (DTLS 1.3) has been </span><a href="https://www.rfc-editor.org/rfc/rfc9147.html" class="">published on April 2022</a><span class="">. </span><span class="">The specification
describes the most current version of the DTLS protocol as a delta from TLS 1.3 and</span><span class=""> obsoletes DTLS 1.2.</span>
<div class=""><br class="">
</div>
<div class="">In JDK, the Java specifications for DTLS 1.0 and DTLS 1.2 are <a href="https://docs.oracle.com/en/java/javase/18/docs/specs/security/standard-names.html#sslcontext-algorithms" class="">defined</a> and <a href="https://docs.oracle.com/en/java/javase/18/security/oracle-providers.html#GUID-7093246A-31A3-4304-AC5F-5FB6400405E2" class="">implemented</a>.
For DTLS 1.3, there may be three different choices for JDK.</div>
<div class=""><br class="">
</div>
<div class="">The 1st one is doing nothing, and JDK will not support DTLS 1.3 in the future.</div>
<div class=""><br class="">
</div>
<div class="">The 2nd one is define the specification in JDK, but without the implementation. Third party’s provider could have the implementation if this feature is required in some circumstances.</div>
<div class=""><br class="">
</div>
<div class="">The 3rd one, as DTLS 1.0 and DTLS 1.2, is to have an implementation in JDK.</div>
<div class=""><br class="">
</div>
<div class="">Are you using DTLS protocols in your applications? Is anyone interested in have DTLS 1.3 in JDK? Which option is best for you?</div>
<div class=""><br class="">
Thanks,</div>
<div class="">Xuelei</div>
</body>
</html>