Re: [CHANNEL-BINDING] [TLS] draft-altman-tls-channel-bindings-10 -- better text on syncproblem
"tom.petch" <cfinss@dial.pipex.com> Tue, 06 April 2010 17:18 UTC
Return-Path: <cfinss@dial.pipex.com>
X-Original-To: channel-binding@core3.amsl.com
Delivered-To: channel-binding@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 975203A6969; Tue, 6 Apr 2010 10:18:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kTCADoRI2fzy; Tue, 6 Apr 2010 10:18:20 -0700 (PDT)
Received: from mk-outboundfilter-5.mail.uk.tiscali.com (mk-outboundfilter-5.mail.uk.tiscali.com [212.74.114.1]) by core3.amsl.com (Postfix) with ESMTP id CC6463A6933; Tue, 6 Apr 2010 10:18:08 -0700 (PDT)
X-Trace: 253705326/mk-outboundfilter-5.mail.uk.tiscali.com/PIPEX/$PIPEX-ACCEPTED/pipex-customers/62.188.100.163/None/cfinss@dial.pipex.com
X-SBRS: None
X-RemoteIP: 62.188.100.163
X-IP-MAIL-FROM: cfinss@dial.pipex.com
X-SMTP-AUTH:
X-MUA: Microsoft Outlook Express 6.00.2800.1106Produced By Microsoft MimeOLE V6.00.2800.1106
X-IP-BHB: Once
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AoAHALIJu0s+vGSj/2dsb2JhbACBd4ViiQyLR7s0DYR8BA
X-IronPort-AV: E=Sophos;i="4.51,373,1267401600"; d="scan'208";a="253705326"
X-IP-Direction: IN
Received: from 1cust163.tnt1.lnd9.gbr.da.uu.net (HELO allison) ([62.188.100.163]) by smtp.pipex.tiscali.co.uk with SMTP; 06 Apr 2010 18:18:03 +0100
Message-ID: <002401cad5a4$76f4fbc0$0601a8c0@allison>
From: "tom.petch" <cfinss@dial.pipex.com>
To: Nicolas Williams <Nicolas.Williams@sun.com>, channel-binding@ietf.org, tls@ietf.org
References: <20100330175257.GN21318@Sun.COM>
Date: Tue, 06 Apr 2010 17:57:55 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailman-Approved-At: Tue, 06 Apr 2010 10:28:02 -0700
Subject: Re: [CHANNEL-BINDING] [TLS] draft-altman-tls-channel-bindings-10 -- better text on syncproblem
X-BeenThere: channel-binding@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: "tom.petch" <cfinss@dial.pipex.com>
List-Id: Discussion of channel binding IANA registry requests and specifications <channel-binding.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/channel-binding>, <mailto:channel-binding-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/channel-binding>
List-Post: <mailto:channel-binding@ietf.org>
List-Help: <mailto:channel-binding-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/channel-binding>, <mailto:channel-binding-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Apr 2010 17:18:21 -0000
Nico You've still got a reference that needs changing " Subsequent to the publication of "On Channel Bindings" [RFC5246], " while in s.4 /specfication,/specification/ and s4.1 'updates to is channel binding' should be 'this'? Tom Petch ----- Original Message ----- From: "Nicolas Williams" <Nicolas.Williams@sun.com> To: <channel-binding@ietf.org>; <sasl@ietf.org>; <tls@ietf.org> Cc: "Alexey Melnikov" <alexey.melnikov@isode.com>; "Pasi Eronen" <pasi.eronen@nokia.com>; "Mark Novak" <Mark.Novak@microsoft.com> Sent: Tuesday, March 30, 2010 7:52 PM Subject: [TLS] draft-altman-tls-channel-bindings-10 -- better text on syncproblem > I've just posted draft-altman-tls-channel-bindings-10: > > http://www.ietf.org/internet-drafts/draft-altman-tls-channel-bindings-10.txt > > I realized that the best way to avoid the synchronization problem is to > simply not request re-negotiation on the server side during application- > layer authentication. I made that a MUST because there's typically an > API by which server-side apps can request re-negotiation. I made the > client-side avoidance technique a SHOULD because the necessary APIs > might be missing. > > With this change I'm happy to adopt the MSFT variant of tls-unique > unchanged. > > Alexey, > > I believe that draft-altman-tls-channel-bindings-10.txt is ready for an > IETF Last Call. > > Nico > -- > _______________________________________________ > TLS mailing list > TLS@ietf.org > https://www.ietf.org/mailman/listinfo/tls
- [CHANNEL-BINDING] draft-altman-tls-channel-bindin… Nicolas Williams
- Re: [CHANNEL-BINDING] [TLS] draft-altman-tls-chan… tom.petch
- Re: [CHANNEL-BINDING] [TLS] draft-altman-tls-chan… Nicolas Williams