Re: 9.2.2 Cipher fallback and FF<->Jetty interop problem

Roland Zink <roland@zinks.de> Thu, 18 September 2014 09:24 UTC

Resent-Date: Thu, 18 Sep 2014 09:21:27 +0000
Resent-Message-Id: <E1XUXu3-0001VA-MF@frink.w3.org>
Message-ID: <541AA3EB.3070602@zinks.de>
Date: Thu, 18 Sep 2014 11:20:43 +0200
From: Roland Zink <roland@zinks.de>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: ietf-http-wg@w3.org
References: <CAH_y2NF+sP9BmYuD4QbeHpwC_uj67itzaAFCnRVC6f--KDYOgg@mail.gmail.com> <CABkgnnWAdm1TLP2XCKNU-6RPACLfooQV73R7Gpoemv+9PNULCA@mail.gmail.com> <CAH_y2NFLjok-NRJtOw1vmSy68sf393iSOgA4K599q0BSBqbNgA@mail.gmail.com> <CABkgnnU-CMtv8KvYU9n+QoPBOBshtQv3RfLy2qw=qVNb2O-qGg@mail.gmail.com> <CAH_y2NHrbH5Objwhq9E89QexhQtND4uOdy8q7OEckTCU17WqKg@mail.gmail.com> <CAH_y2NErRd4rxinSzEH3-uTjdWVkZu9o6sSKSf47LxfPFTRONw@mail.gmail.com> <20140917073241.GA7665@LK-Perkele-VII> <CAFewVt4pxE+9NpzYuzMKGmEdrDXzk50mC99ZbrM6M-uEoKXrHA@mail.gmail.com> <CAH_y2NGYcDvPcxDvaTRBP3p4Pnb7gw39WUDY3bNVnOGQjBgciQ@mail.gmail.com> <CAFewVt7+UAJYfKAR6DRZi_mqdzSaYw6L-pT1qg=UyOaP1ojhTw@mail.gmail.com> <CAH_y2NEhAEaPiUgi_vX6Oimw+Y-k3WrnL0gJZKPxQ8KZVuFVfw@mail.gmail.com> <CABkgnnU6C+TzJzdeQZhwXucuPUrPh1yyp1cpRd9jSePMjAnONQ@mail.gmail.com> <541A653C.4050903@gmail.com> <CAH_y2NFKqH8HGfXk0VR2BZ3n1vKPXeQkM0-qVjGhnz_TFGAwew@mail.gmail.com> <CAH_hAJHrhY1nQAHQ_o0uVPuqccLDzYAyNEuZ6q1Dh4ePDBKA_A@mail.gmail.com>
In-Reply-To: <CAH_hAJHrhY1nQAHQ_o0uVPuqccLDzYAyNEuZ6q1Dh4ePDBKA_A@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Received-SPF: none client-ip=81.169.146.220; envelope-from=roland@zinks.de; helo=mo4-p00-ob.smtp.rzone.de
Subject: Re: 9.2.2 Cipher fallback and FF<->Jetty interop problem
Archived-At: <http://www.w3.org/mid/541AA3EB.3070602@zinks.de>
Resent-From: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list

I think the goal of section 9.2.2 is laudable. But I'm not sure if the 
layering is ok. When this is done within TLS, say with TLS 1.3, then the 
problem would vanish and the http2 layer wouldn't need to worry about it.

Roland

On 18.09.2014 10:33, Cory Benfield wrote:
> Greg, I'm genuinely sympathetic to your original complaint. I've had 
> problem with cipher suites as well, and have accepted that the best I 
> can do is fail if the server screwed up. I don't like that approach. 
> But I think the goal of section 9.2.2 is laudable and I'd be loathe to 
> remove it without replacing it with something equally important. Cory

9.2.2 Cipher fallback and FF<->Jetty interop prob… Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Brian Smith
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Cory Benfield
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Ilari Liusvaara
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roy T. Fielding
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jim Manico
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Mark Nottingham
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Patrick McManus
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Willy Tarreau
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Julian Reschke
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Jason Greene
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Greg Wilkins
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Amos Jeffries
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Stuart Douglas
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Roland Zink
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Simone Bordet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Michael Sweet
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Eric Rescorla
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Andrei Popov
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … Martin Thomson
RE: 9.2.2 Cipher fallback and FF<->Jetty interop … Rob Trace
Re: 9.2.2 Cipher fallback and FF<->Jetty interop … John Mattsson