Re: 9.2.2 Cipher fallback and FF<->Jetty interop problem

"Roy T. Fielding" <fielding@gbiv.com> Thu, 18 September 2014 18:00 UTC

Resent-Date: Thu, 18 Sep 2014 17:57:38 +0000
Resent-Message-Id: <E1XUfxa-0000RK-UN@frink.w3.org>
Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: text/plain; charset="us-ascii"
From: "Roy T. Fielding" <fielding@gbiv.com>
In-Reply-To: <CAFWmRJ1ZEwKP9HaWJODjU6CZ8mbw9sticm7LJ8bL_iLy7qc6Bw@mail.gmail.com>
Date: Thu, 18 Sep 2014 10:56:41 -0700
Cc: Greg Wilkins <gregw@intalio.com>, HTTP Working Group <ietf-http-wg@w3.org>
Content-Transfer-Encoding: 7bit
Message-Id: <B9D3F14A-C300-4AB7-B140-41E86CFCB24F@gbiv.com>
References: <CAH_y2NF+sP9BmYuD4QbeHpwC_uj67itzaAFCnRVC6f--KDYOgg@mail.gmail.com> <CAOdDvNopynmwvwWLXvuC0q7skunFXcfRoVHe9s7BKcoCwaBgWQ@mail.gmail.com> <CAH_y2NGXz7e3ejqy_rD=39=yYp3+cS1Dm6c3yFEYZg6tsUp5VQ@mail.gmail.com> <CABkgnnWAdm1TLP2XCKNU-6RPACLfooQV73R7Gpoemv+9PNULCA@mail.gmail.com> <CAH_y2NFLjok-NRJtOw1vmSy68sf393iSOgA4K599q0BSBqbNgA@mail.gmail.com> <CABkgnnU-CMtv8KvYU9n+QoPBOBshtQv3RfLy2qw=qVNb2O-qGg@mail.gmail.com> <CAH_y2NHrbH5Objwhq9E89QexhQtND4uOdy8q7OEckTCU17WqKg@mail.gmail.com> <CAH_y2NErRd4rxinSzEH3-uTjdWVkZu9o6sSKSf47LxfPFTRONw@mail.gmail.com> <20140917073241.GA7665@LK-Perkele-VII> <CAFewVt4pxE+9NpzYuzMKGmEdrDXzk50mC99ZbrM6M-uEoKXrHA@mail.gmail.com> <CAH_y2NGYcDvPcxDvaTRBP3p4Pnb7gw39WUDY3bNVnOGQjBgciQ@mail.gmail.com> <CAFewVt7+UAJYfKAR6DRZi_mqdzSaYw6L-pT1qg=UyOaP1ojhTw@mail.gmail.com> <CAH_y2NEhAEaPiUgi_vX6Oimw+Y-k3WrnL0gJZKPxQ8KZVuFVfw@mail.gmail.com> <CABkgnnU6C+TzJzdeQZhwXucuPUrPh1yyp1cpRd9jSePMjAnONQ@mail.gmail.com> <CAH_y2NEHZbWLof=ZWEa2UdjBw1Bf+kQCHzPkrhcSU80WaDib eA@mail.gmail.com> <C76D7E6B-06BA-4FF1-B0AF-804AC118A38E@gbiv.com> <CAFWmRJ1ZEwKP9HaWJODjU6CZ8mbw9sticm7LJ8bL_iLy7qc6Bw@mail.gmail.com>
To: Simone Bordet <simone.bordet@gmail.com>
Received-SPF: none client-ip=69.163.253.135; envelope-from=fielding@gbiv.com; helo=homiemail-a106.g.dreamhost.com
Subject: Re: 9.2.2 Cipher fallback and FF<->Jetty interop problem
Archived-At: <http://www.w3.org/mid/B9D3F14A-C300-4AB7-B140-41E86CFCB24F@gbiv.com>
Resent-From: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list

On Sep 18, 2014, at 9:33 AM, Simone Bordet wrote:
> On Thu, Sep 18, 2014 at 5:41 PM, Roy T. Fielding <fielding@gbiv.com> wrote:
>> I still don't believe that any of these requirements belong in h2,
>> and I won't implement them even if they end up in the RFC.
> 
> As much as I would like to have 9.2.2 reworded to delegate to the TLS
> spec, not implementing it on servers while all major browsers
> implements it will result in a closed connection, no fallback and an
> empty white page.

No, it will just be left to the administrator to configure the right ciphers.
Doing that inside an application protocol is insane.

....Roy

9.2.2 Cipher fallback and FF<->Jetty interop prob… Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jim Manico
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Mark Nottingham
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Julian Reschke
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Rob Trace
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … John Mattsson