Re: 9.2.2 Cipher fallback and FF<->Jetty interop problem

Jason Greene <jason.greene@redhat.com> Mon, 22 September 2014 16:44 UTC

Resent-Date: Mon, 22 Sep 2014 16:42:16 +0000
Resent-Message-Id: <E1XW6gq-0003Gh-PS@frink.w3.org>
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
From: Jason Greene <jason.greene@redhat.com>
In-Reply-To: <CABcZeBPvQfkqnPkfzY53RVAHNw0govmp8p8obvp99w8zs4=RKw@mail.gmail.com>
Date: Mon, 22 Sep 2014 11:41:22 -0500
Cc: Greg Wilkins <gregw@intalio.com>, Patrick McManus <pmcmanus@mozilla.com>, HTTP Working Group <ietf-http-wg@w3.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <D7B49F55-663F-4005-AD06-7E4057491608@redhat.com>
References: <CAH_y2NF+sP9BmYuD4QbeHpwC_uj67itzaAFCnRVC6f--KDYOgg@mail.gmail.com> <CAOdDvNopynmwvwWLXvuC0q7skunFXcfRoVHe9s7BKcoCwaBgWQ@mail.gmail.com> <CAH_y2NGXz7e3ejqy_rD=39=yYp3+cS1Dm6c3yFEYZg6tsUp5VQ@mail.gmail.com> <CABkgnnWAdm1TLP2XCKNU-6RPACLfooQV73R7Gpoemv+9PNULCA@mail.gmail.com> <CAH_y2NFLjok-NRJtOw1vmSy68sf393iSOgA4K599q0BSBqbNgA@mail.gmail.com> <CABkgnnU-CMtv8KvYU9n+QoPBOBshtQv3RfLy2qw=qVNb2O-qGg@mail.gmail.com> <CAH_y2NHrbH5Objwhq9E89QexhQtND4uOdy8q7OEckTCU17WqKg@mail.gmail.com> <CAH_y2NErRd4rxinSzEH3-uTjdWVkZu9o6sSKSf47LxfPFTRONw@mail.gmail.com> <20140917073241.GA7665@LK-Perkele-VII> <CAFewVt4pxE+9NpzYuzMKGmEdrDXzk50mC99ZbrM6M-uEoKXrHA@mail.gmail.com> <CAH_y2NGYcDvPcxDvaTRBP3p4Pnb7gw39WUDY3bNVnOGQjBgciQ@mail.gmail.com> <CAFewVt7+UAJYfKAR6DRZi_mqdzSaYw6L-pT1qg=UyOaP1ojhTw@mail.gmail.com> <CAH_y2NEhAEaPiUgi_vX6Oimw+Y-k3WrnL0gJZKPxQ8KZVuFVfw@mail.gmail.com> <CABkgnnU6C+TzJzdeQZhwXucuPUrPh1yyp1cpRd9jSePMjAnONQ@mail.gmail.com> <CAH_y2NEHZbWLof=ZWEa2UdjBw1Bf+kQCHzPkrhc! SU80WaDibeA@mail.gmail.com> <CAOdDvNrdrBNi0kZDorR+8K-5-sPFipVr=U0kx5r56oPX_LhJSA@mail.gmail.com> <CAH_y2NH=skUXk0QwCs4uVqWE=iOLhi5K+kvARDUQ7uMeogrw9A@mail.gmail.com> <CABcZeBPvQfkqnPkfzY53RVAHNw0govmp8p8obvp99w8zs4=RKw@mail.gmail.com>
To: Eric Rescorla <ekr@rtfm.com>
Received-SPF: pass client-ip=209.132.183.28; envelope-from=jason.greene@redhat.com; helo=mx1.redhat.com
Subject: Re: 9.2.2 Cipher fallback and FF<->Jetty interop problem
Archived-At: <http://www.w3.org/mid/D7B49F55-663F-4005-AD06-7E4057491608@redhat.com>
Resent-From: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list

On Sep 22, 2014, at 11:18 AM, Eric Rescorla <ekr@rtfm.com> wrote:

> 
> I don't actually think this is that important an issue either. As I understood the discussion
> in Zurich, the new TLS limitations were directed towards pulling users of HTTP2 towards
> modern algorithms. However, algorithms which have serious weaknesses should probably
> be deprecated in all versions of HTTP (as with https://tools.ietf.org/html/draft-ietf-tls-prohibiting-rc4-00)
> 
> Say we decided that in future we preferred Aero (https://tools.ietf.org/html/draft-mcgrew-aero-01)
> to AEAD constructions. That seems like something we could roll out in HTTP3 but wouldn't
> be appropriate to retroactively apply to TLS 1.2 unless there was something seriously wrong
> with AEAD (and then see above).

I think this hypothetical actually counters your point. Every rev of the HTTP spec introduces interop cost, therefore having to rev the protocol just because TLS needs to rev is unnecessary cost. 

--
Jason T. Greene
WildFly Lead / JBoss EAP Platform Architect
JBoss, a division of Red Hat

9.2.2 Cipher fallback and FF<->Jetty interop prob… Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jim Manico
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Mark Nottingham
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Julian Reschke
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Rob Trace
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … John Mattsson