From what I understand, when using DTLS, the TLS handshake is made reliable, but the transport of application data is not.
I'm looking at a PCAP from the DTLS section of the Wireshark site. The cipher TLS_RSA_WITH_AES_256_CBC_SHA was chosen.
Now when using CBC, the decryption of a message is dependent on the successful receipt of the previous message. However, given that DTLS does not reliably transport application data, it seems this would break the stream if a packet were lost.
So, is there something I missing? Can CBC work when using DTLS (over UDP), or should another cipher be chosen?