Jo Turk recounts the 10-month journey of implementing DTLS 1.3 for the Pion Go WebRTC library, resulting in over 400 commits and making DTLS 1.3 the new default. The implementation adds post-quantum key exchange, Connection IDs for network handoff resilience, 0-RTT resumption, and Encrypted Client Hello support. The feature request had been open since February 2020, with community and NLnet funding efforts finally catalyzing completion.
Background
Pion is a popular Go implementation of WebRTC components widely used in production. DTLS 1.3 (RFC 9147, published 2022) brings improved security, performance, and post-quantum readiness compared to DTLS 1.2, but adoption in Go libraries has been slow.
- Source
- Lobsters
- Published
- Nov 7, 2026 at 08:54 AM
- Score
- 6.0 / 10