Re: [hybi] Moving to a CONNECT-based handshake

John Tamplin <jat@google.com> Tue, 30 November 2010 19:51 UTC

Return-Path: <jat@google.com>
X-Original-To: hybi@core3.amsl.com
Delivered-To: hybi@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5E7863A6BDF for <hybi@core3.amsl.com>; Tue, 30 Nov 2010 11:51:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -104.277
X-Spam-Level:
X-Spam-Status: No, score=-104.277 tagged_above=-999 required=5 tests=[AWL=1.700, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eUVRN8pLqmun for <hybi@core3.amsl.com>; Tue, 30 Nov 2010 11:51:52 -0800 (PST)
Received: from smtp-out.google.com (smtp-out.google.com [216.239.44.51]) by core3.amsl.com (Postfix) with ESMTP id 931DD3A6BC7 for <hybi@ietf.org>; Tue, 30 Nov 2010 11:51:52 -0800 (PST)
Received: from wpaz33.hot.corp.google.com (wpaz33.hot.corp.google.com [172.24.198.97]) by smtp-out.google.com with ESMTP id oAUJr3bm009113 for <hybi@ietf.org>; Tue, 30 Nov 2010 11:53:04 -0800
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=google.com; s=beta; t=1291146784; bh=q7NUTUdQHJkd89DqsxViCBqh184=; h=MIME-Version:In-Reply-To:References:From:Date:Message-ID:Subject: To:Cc:Content-Type; b=PKvpLlUlzlaGnhG1Ni35whUsi3ky0pzfJ/xV+szZ2hK6FnhsRaTOnSODVNdZitiR4 JXL/fTJX/uvklboLgJW3g==
Received: from qyk34 (qyk34.prod.google.com [10.241.83.162]) by wpaz33.hot.corp.google.com with ESMTP id oAUJqMBk029112 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT) for <hybi@ietf.org>; Tue, 30 Nov 2010 11:53:03 -0800
Received: by qyk34 with SMTP id 34so1598163qyk.3 for <hybi@ietf.org>; Tue, 30 Nov 2010 11:53:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=beta; h=domainkey-signature:received:mime-version:received:in-reply-to :references:from:date:message-id:subject:to:cc:content-type; bh=cXQ/pEU2EQ2lCdolmHyZlewQROb7T4C15Hemx6ArYdE=; b=pKKlicpOjWQsjagMjmVLgTN+tcobMSMIqenAFFOrTlt+q3v2Ox4uULN24aROUSsYNs LtY1Z2GfUrAO/M4BfvwA==
DomainKey-Signature: a=rsa-sha1; c=nofws; d=google.com; s=beta; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; b=ONwyb1EryVGfHP4nDJsP1yrfdK+AwRKMa+/wBmW7YOoHq0d7P4SH19iIYEGqgn5QBW S031r4TfFkV7A/hYyZYA==
Received: by 10.229.251.1 with SMTP id mq1mr880000qcb.22.1291146782675; Tue, 30 Nov 2010 11:53:02 -0800 (PST)
MIME-Version: 1.0
Received: by 10.229.197.13 with HTTP; Tue, 30 Nov 2010 11:52:42 -0800 (PST)
In-Reply-To: <0FB073DB-9435-4DD6-8E7C-CD04DE75A104@webex.co>
References: <op.vmzqkhszidj3kv@simon-pieterss-macbook.local> <4CF52558.9010100@gmx.de> <4CF529FF.9080708@opera.com> <BB31C4AB95A70042A256109D4619912605790150@XCH117CNC.rim.net> <AANLkTimzTvtho0m9HZSe6exgSwZxbCnxtmeJd2-G0aSK@mail.gmail.com> <BB31C4AB95A70042A256109D4619912605790178@XCH117CNC.rim.net> <BB31C4AB95A70042A256109D4619912605790190@XCH117CNC.rim.net> <AANLkTimQJz22RtoVnB16C8Mi4C8=QKB946wSR9BRsP85@mail.gmail.com> <AANLkTi=BPFKVfj1CQQ4pk9-M_-9=ftQQPerfAFZtV8K7@mail.gmail.com> <0FB073DB-9435-4DD6-8E7C-CD04DE75A104@webex.co>
From: John Tamplin <jat@google.com>
Date: Tue, 30 Nov 2010 14:52:42 -0500
Message-ID: <AANLkTi=u_1j8tHUaL5V_xmuCWvxZUw3a=Yof5ySjHemj@mail.gmail.com>
To: Joe Hildebrand <Joe.Hildebrand@webex.com>
Content-Type: text/plain; charset="UTF-8"
X-System-Of-Record: true
Cc: hybi@ietf.org
Subject: Re: [hybi] Moving to a CONNECT-based handshake
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Nov 2010 19:51:53 -0000

On Tue, Nov 30, 2010 at 2:42 PM, Joe Hildebrand
<Joe.Hildebrand@webex.com> wrote:
> That's been suggested in the past, and likely won't get us to consensus
> quicker.

In the past, we didn't have a demonstrated attack on the Upgrade
handshake, which is why I thought it might be worth bringing up.

-- 
John A. Tamplin
Software Engineer (GWT), Google