Re: [CFRG] Comment on draft-irtf-cfrg-aead-limits-01

[Stephen Farrell <[e-mail]>]

Hiya,

On 17/11/2020 00:38, Eric Rescorla wrote:
> What stops the TLS or QUIC stack from rekeying internally
> when it hits the limit without even notifying the developer.

The heat death of the (developer's local) universe? :-)

I can some envisage developers reading text like this
draft and concluding that they'll never hit the relevant
limit (or more likely assuming that, as it means writing
and testing less code) and never writing any code to
trigger a re-key.

Given the more likely risk is leakage rather than
exhausting the crypto-lifetime of a key (in at least
many cases), text addressing that may be useful.

Cheers,
S.