A PHP internals mailing list thread proposing DTLS (RFC 6347, the UDP counterpart of TLS) support in PHP's ext/openssl extension. The author has a working proof-of-concept featuring an Openssl\Dtls class using memory BIOs so applications can own packet I/O — enabling WebRTC data channels, DTLS-SRTP, CoAP, and other protocols that multiplex DTLS with other traffic on one UDP socket. Discussion covers API design choices: using OpenSSLCertificate/OpenSSLAsymmetricKey objects instead of PEM strings, enums vs integer constants for handshake state, and whether to add a dtls:// stream wrapper alongside the low-level engine. The ext/openssl maintainer (Jakub) prefers a stream wrapper approach, while the author argues both surfaces are needed — the stream for simple cases and the low-level engine for WebRTC-style multiplexing. The proposal suggests one core implementation with two API surfaces.
