We often hear TLS over TCP socket and very famliar with its use case e.g. HTTPS
.
While I am learning Linux socket progamming, I read a An Introduction to OpenSSL Programming, Part I of II tutorial . (Obviously it's about TLS over TCP).
Later on I started to think about something like "TLS over UDP" and did some search, but didn't find anything popular. (I know there's something like DTLS, but in practice do people really use it?)
So my question is, in the fields that UDP dominates, for example game server (I know little about game development), do they use anything like TLS over TCP to authenticate and encrypt the communication/raw UDP packet?
Or is it just uncessary?
My guess:
In some ways I think it's uncessary to employ something like TLS. For example, one big usage of TLS is for authentication. But as for a game (sorry so far I only know UDP is widely used in gaming), you download the client, as long as the client is not modified by someone, you are done with authentication. And then for encryption, that might be necessary or might not. Because for a game you need to create your own application level protocol and that's a kind of encrytion. Beyond that, if necessary, one can use symmetric encryption like AES too.
Is my guess correct?