Re: [Iotops] [arch-d] How old is too old and what this means for product lifecycles? Re: [Last-Call] [TLS] Last Call: <draft-ietf-tls-oldversions-deprecate-09.txt> (Deprecating TLSv1.0 and TLSv1.1) to Best Current Practice

Eric Rescorla <ekr@rtfm.com> Sat, 05 December 2020 18:54 UTC

MIME-Version: 1.0
References: <160496076356.8063.5138064792555453422@ietfa.amsl.com> <SN6PR02MB4512B95842251AE4C04B199CC3F30@SN6PR02MB4512.namprd02.prod.outlook.com> <BYAPR14MB31765FD24F4DFD90F81AEE2BD7F30@BYAPR14MB3176.namprd14.prod.outlook.com> <SN6PR02MB4512CBA9E4BF6AAC778BC674C3F30@SN6PR02MB4512.namprd02.prod.outlook.com> <DM6PR14MB31789349B737961728B7691ED7F30@DM6PR14MB3178.namprd14.prod.outlook.com> <CACsn0ckvoqZ5-JPRkOXp2Mw2zeTOdyCYLvX1NV1waJ-yidTwMQ@mail.gmail.com> <SN6PR02MB45129E647485BA5794D5CF4EC3F20@SN6PR02MB4512.namprd02.prod.outlook.com> <MWHPR02MB2464CD5D5B7568E9EAC58B26D6F20@MWHPR02MB2464.namprd02.prod.outlook.com> <DM6PR14MB3178EC0521427BF7C3523CACD7F10@DM6PR14MB3178.namprd14.prod.outlook.com> <CAChr6SzvQK+exfgYEwfVNknMjr-Y-UJ4A7k0DkOkL9wmLQ84aQ@mail.gmail.com> <MWHPR02MB246499F35613820D45EB55AAD6F10@MWHPR02MB2464.namprd02.prod.outlook.com> <DM6PR14MB3178A0C152A746E41C6A01C6D7F10@DM6PR14MB3178.namprd14.prod.outlook.com> <f8486514-9726-68d0-2bc8-dccd4293017e@cs.tcd.ie> <DM6PR14MB317843CA2B3D67F6660F4F0DD7F10@DM6PR14MB3178.namprd14.prod.outlook.com> <127BB8C9-679E-48C1-8617-C6092AEE9914@fugue.com> <DM6PR14MB3178C1F8B6E4FD6E9FD9C8C4D7F10@DM6PR14MB3178.namprd14.prod.outlook.com> <8E6EB6FF-E83B-44B5-A0A2-7499678DC6B6@fugue.com> <DM6PR14MB317817FD62369A8E0FF93CA8D7F10@DM6PR14MB3178.namprd14.prod.outlook.com> <77363965-99A5-4790-B40B-011827C8D113@fugue.com> <80F697E4-B225-49E0-8271-CDAB66E42A95@cisco.com> <m2zh2sktty.wl-randy@psg.com> <29EBB9B3-4AF6-4734-B7C4-A03F99935F6D@fugue.com> <m2y2ickt0l.wl-randy@psg.com> <6FA07BCE-B9A9-490C-A687-2EA0FF6E6993@fugue.com> <m2wnxwks5y.wl-randy@psg.com>
In-Reply-To: <m2wnxwks5y.wl-randy@psg.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Sat, 05 Dec 2020 10:54:08 -0800
Message-ID: <CABcZeBMsL0j+4CmoE9f35RzaB9Vjj1KQyxoHZ9ohF7hY+DaJxQ@mail.gmail.com>
To: Randy Bush <randy@psg.com>
Cc: Ted Lemon <mellon@fugue.com>, iotops@ietf.org, architecture-discuss@iab.org, "Ackermann, Michael" <MAckermann@bcbsm.com>
Content-Type: multipart/alternative; boundary="0000000000005c65fe05b5bc2066"
Archived-At: <https://mailarchive.ietf.org/arch/msg/iotops/QkG0_0eQr1uZKgNvJGlaH9rMkIs>
Subject: Re: [Iotops] [arch-d] How old is too old and what this means for product lifecycles? Re: [Last-Call] [TLS] Last Call: <draft-ietf-tls-oldversions-deprecate-09.txt> (Deprecating TLSv1.0 and TLSv1.1) to Best Current Practice
Precedence: list

I know you're just being sarcastic, but Microsoft, in cooperation with
INRIA and others has done a bunch of great work on code verification,
including:

- mitls - a verified TLS stack [https://www.mitls.org/]
- HACL* - verified implementations of a number of important cryptographic
algorithms [https://hacl-star.github.io/]

HACL* is actually seeing quite a bit of use. To quote from their site "Code
from HACL* has been incorporated into Firefox
<https://bugzilla.mozilla.org/show_bug.cgi?id=1387183>, the Windows kernel,
the Linux kernel, the Tezos blockchain
<https://www.reddit.com/r/tezos/comments/8hrsz2/tezos_switches_cryptographic_libraries_from/>,
the Microsoft MSQuic implementation of the QUIC protocol, and the Wireguard
VPN <https://lwn.net/Articles/770750/>."

-Ekr

On Sat, Dec 5, 2020 at 10:46 AM Randy Bush <randy@psg.com> wrote:

> > they can dump it on github
>
> well chosen verb
>
> now that github is owned by msoft, next year msoft ai will formally
> verify and correct all the dren on github.  w00t!
>
> randy
>
> _______________________________________________
> Architecture-discuss mailing list
> Architecture-discuss@ietf.org
> https://www.ietf.org/mailman/listinfo/architecture-discuss
>

[Iotops] How old is too old and what this means f… Eliot Lear
Re: [Iotops] How old is too old and what this mea… Ted Lemon
Re: [Iotops] How old is too old and what this mea… Randy Bush
Re: [Iotops] How old is too old and what this mea… Ted Lemon
Re: [Iotops] How old is too old and what this mea… Randy Bush
Re: [Iotops] How old is too old and what this mea… Ted Lemon
Re: [Iotops] How old is too old and what this mea… Randy Bush
Re: [Iotops] How old is too old and what this mea… Randy Bush
Re: [Iotops] [arch-d] How old is too old and what… Eric Rescorla
Re: [Iotops] [arch-d] How old is too old and what… Randy Bush
Re: [Iotops] [arch-d] How old is too old and what… Christian Huitema
Re: [Iotops] How old is too old and what this mea… Amyas Phillips
Re: [Iotops] How old is too old and what this mea… Eliot Lear
Re: [Iotops] How old is too old and what this mea… Toerless Eckert
Re: [Iotops] [arch-d] How old is too old and what… Henning Schulzrinne
Re: [Iotops] [arch-d] How old is too old and what… Sávyo Vinícius
Re: [Iotops] [arch-d] How old is too old and what… Randy Bush
Re: [Iotops] [arch-d] How old is too old and what… Toerless Eckert
Re: [Iotops] [arch-d] How old is too old and what… Michael Richardson
Re: [Iotops] [arch-d] How old is too old and what… Michael Richardson
Re: [Iotops] [arch-d] How old is too old and what… Sávyo Vinícius
Re: [Iotops] How old is too old and what this mea… Randy Bush
Re: [Iotops] How old is too old and what this mea… Eliot Lear