Protocol Action: 'Using TLS 1.3 with HTTP/2' to Proposed Standard (draft-ietf-httpbis-http2-tls13-03.txt)

The IESG <iesg-secretary@ietf.org> Mon, 21 October 2019 15:48 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Protocol Action: 'Using TLS 1.3 with HTTP/2' to Proposed Standard (draft-ietf-httpbis-http2-tls13-03.txt)
Auto-Submitted: auto-generated
Precedence: bulk
Cc: httpbis-chairs@ietf.org, The IESG <iesg@ietf.org>, draft-ietf-httpbis-http2-tls13@ietf.org, Mark Nottingham <mnot@mnot.net>, mnot@mnot.net, ietf-http-wg@w3.org, barryleiba@gmail.com, rfc-editor@rfc-editor.org
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Message-ID: <157167291367.31932.17036891076505480879.idtracker@ietfa.amsl.com>
Date: Mon, 21 Oct 2019 08:48:33 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/jB89OTXAYW_0ZzMCwxdB47PE2ZI>

The IESG has approved the following document:
- 'Using TLS 1.3 with HTTP/2'
  (draft-ietf-httpbis-http2-tls13-03.txt) as Proposed Standard

This document is the product of the Hypertext Transfer Protocol Working Group.

The IESG contact persons are Adam Roach, Alexey Melnikov and Barry Leiba.

A URL of this Internet Draft is:
https://datatracker.ietf.org/doc/draft-ietf-httpbis-http2-tls13/




Technical Summary

This document updates HTTP/2 to prohibit TLS 1.3 post-handshake authentication, as an analog to
existing TLS 1.2 renegotiation restriction.

Working Group Summary

This document was prepared when Working Group members noticed that the
restrictions for post-handshake authentication in HTTP/2, which were
designed with the constraints of TLS 1.2 in mind, no longer were
necessary for TLS 1.3.

Document Quality

This is a very short update to address that. It has wide support amongst
the working group, including from implementers.

Personnel

Mark Nottingham is the Document Shepherd; Barry Leiba is the responsible
Area Director.

Protocol Action: 'Using TLS 1.3 with HTTP/2' to P… The IESG