Re: [CHANNEL-BINDING] [TLS] draft-altman-tls-channel-bindings-10 -- better text on syncproblem

"tom.petch" <cfinss@dial.pipex.com> Tue, 06 April 2010 17:18 UTC

Return-Path: <cfinss@dial.pipex.com>
X-Original-To: channel-binding@core3.amsl.com
Delivered-To: channel-binding@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 975203A6969; Tue, 6 Apr 2010 10:18:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kTCADoRI2fzy; Tue, 6 Apr 2010 10:18:20 -0700 (PDT)
Received: from mk-outboundfilter-5.mail.uk.tiscali.com (mk-outboundfilter-5.mail.uk.tiscali.com [212.74.114.1]) by core3.amsl.com (Postfix) with ESMTP id CC6463A6933; Tue, 6 Apr 2010 10:18:08 -0700 (PDT)
X-Trace: 253705326/mk-outboundfilter-5.mail.uk.tiscali.com/PIPEX/$PIPEX-ACCEPTED/pipex-customers/62.188.100.163/None/cfinss@dial.pipex.com
X-SBRS: None
X-RemoteIP: 62.188.100.163
X-IP-MAIL-FROM: cfinss@dial.pipex.com
X-SMTP-AUTH:
X-MUA: Microsoft Outlook Express 6.00.2800.1106Produced By Microsoft MimeOLE V6.00.2800.1106
X-IP-BHB: Once
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AoAHALIJu0s+vGSj/2dsb2JhbACBd4ViiQyLR7s0DYR8BA
X-IronPort-AV: E=Sophos;i="4.51,373,1267401600"; d="scan'208";a="253705326"
X-IP-Direction: IN
Received: from 1cust163.tnt1.lnd9.gbr.da.uu.net (HELO allison) ([62.188.100.163]) by smtp.pipex.tiscali.co.uk with SMTP; 06 Apr 2010 18:18:03 +0100
Message-ID: <002401cad5a4$76f4fbc0$0601a8c0@allison>
From: "tom.petch" <cfinss@dial.pipex.com>
To: Nicolas Williams <Nicolas.Williams@sun.com>, channel-binding@ietf.org, tls@ietf.org
References: <20100330175257.GN21318@Sun.COM>
Date: Tue, 06 Apr 2010 17:57:55 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailman-Approved-At: Tue, 06 Apr 2010 10:28:02 -0700
Subject: Re: [CHANNEL-BINDING] [TLS] draft-altman-tls-channel-bindings-10 -- better text on syncproblem
X-BeenThere: channel-binding@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: "tom.petch" <cfinss@dial.pipex.com>
List-Id: Discussion of channel binding IANA registry requests and specifications <channel-binding.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/channel-binding>, <mailto:channel-binding-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/channel-binding>
List-Post: <mailto:channel-binding@ietf.org>
List-Help: <mailto:channel-binding-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/channel-binding>, <mailto:channel-binding-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Apr 2010 17:18:21 -0000

Nico

You've still got a reference that needs changing
"   Subsequent to the publication of "On Channel Bindings" [RFC5246],
"
while in s.4
/specfication,/specification/
and s4.1
'updates to is channel binding'
should be 'this'?
Tom Petch

----- Original Message -----
From: "Nicolas Williams" <Nicolas.Williams@sun.com>
To: <channel-binding@ietf.org>; <sasl@ietf.org>; <tls@ietf.org>
Cc: "Alexey Melnikov" <alexey.melnikov@isode.com>; "Pasi Eronen"
<pasi.eronen@nokia.com>; "Mark Novak" <Mark.Novak@microsoft.com>
Sent: Tuesday, March 30, 2010 7:52 PM
Subject: [TLS] draft-altman-tls-channel-bindings-10 -- better text on
syncproblem


> I've just posted draft-altman-tls-channel-bindings-10:
>
> http://www.ietf.org/internet-drafts/draft-altman-tls-channel-bindings-10.txt
>
> I realized that the best way to avoid the synchronization problem is to
> simply not request re-negotiation on the server side during application-
> layer authentication.  I made that a MUST because there's typically an
> API by which server-side apps can request re-negotiation.  I made the
> client-side avoidance technique a SHOULD because the necessary APIs
> might be missing.
>
> With this change I'm happy to adopt the MSFT variant of tls-unique
> unchanged.
>
> Alexey,
>
> I believe that draft-altman-tls-channel-bindings-10.txt is ready for an
> IETF Last Call.
>
> Nico
> --
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls