A PHP internals RFC idea proposing native DTLS (Datagram TLS, the UDP counterpart of TLS) support in ext/openssl. The author identifies two gaps in PHP's current TLS support: no DTLS at all, and no way to run (D)TLS over an application-controlled transport. The proposal introduces an Openssl\Dtls class using memory BIOs so the application manages datagram I/O itself, enabling use cases like WebRTC data channels, DTLS-SRTP, and CoAP over DTLS. A working proof-of-concept with .phpt tests already exists. The author is gauging community interest before filing a formal RFC, and raises open questions about API design, HelloVerifyRequest cookie handling, and whether this belongs in core or userland/FFI.
279 Impressions