DTLS 1.3: Securing UDP Connections

UDP moves data with low overhead, but it does not provide encryption. A device’s network address can also change during a session. DTLS 1.3 protects the connection with fewer handshake round trips, explicit acknowledgments, and support for maintaining the session when an endpoint’s address changes.

This webinar compares DTLS 1.3 with DTLS 1.2 and follows its integration into a UDP application using wolfSSL. Trace the handshake, test retransmission behavior under packet loss, and use Connection ID to preserve sessions as clients move between networks.

The session will also examine cookie-based client verification for reducing denial-of-service risk, along with ML-KEM and hybrid key exchange options for adding post-quantum protection to DTLS 1.3 connections.

This webinar will cover:

  • Compare DTLS 1.3 handshakes and retransmissions with DTLS 1.2
  • Recover efficiently from packet loss using explicit acknowledgments
  • Preserve sessions across network changes with Connection ID
  • Reduce denial-of-service risk with cookie-based client verification
  • Integrate wolfSSL DTLS 1.3 into a UDP application
  • Examine ML-KEM and hybrid post-quantum key exchange

Ask the ExpertOur experts answer key questions about what attendees will learn

How does DTLS 1.3 handle packet loss?
Explicit acknowledgments identify which handshake messages arrived, so only missing messages need to be retransmitted.

What happens when a device changes networks?
Connection ID allows the DTLS session to continue when the device’s IP address or port changes.

How does DTLS 1.3 reduce denial-of-service risk?
Cookie verification confirms that a client can receive packets at its claimed address before the server commits significant resources to the handshake.


Date: August 20 | 9:00 AM PT
Register now for a practical walkthrough of securing UDP applications with wolfSSL DTLS 1.3.

As always, our webinar will include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.

Download wolfSSL Now