I-D Action: draft-dkg-tls-reject-static-dh-01.txt

internet-drafts@ietf.org Wed, 05 December 2018 04:44 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-dkg-tls-reject-static-dh-01.txt
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <154398508139.4969.14876179646826036811@ietfa.amsl.com>
Date: Tue, 04 Dec 2018 20:44:41 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/i-d-announce/4SosyrGfUQ7OA_OBqccXW2rpMmo>

A New Internet-Draft is available from the on-line Internet-Drafts directories.


        Title           : TLS clients should reject static Diffie-Hellman
        Author          : Daniel Kahn Gillmor
	Filename        : draft-dkg-tls-reject-static-dh-01.txt
	Pages           : 8
	Date            : 2018-12-04

Abstract:
   This draft addresses problematic proposals that contradict the
   expected security properties of TLS.  In particular, the ETSI
   "Middlebox Security Protocol" standard deliberately weakens the
   cryptographic guarantees of TLS unilaterally by the server, using
   static Diffie-Hellman keys where ephemeral keys are expected.
   Responsible TLS clients should avoid connecting to servers that
   appear to implement such a specification.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-dkg-tls-reject-static-dh/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-dkg-tls-reject-static-dh-01
https://datatracker.ietf.org/doc/html/draft-dkg-tls-reject-static-dh-01

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-dkg-tls-reject-static-dh-01


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

I-D Action: draft-dkg-tls-reject-static-dh-01.txt internet-drafts