Date: Wed, 23 Jan 2019 17:03:58 +0000 (UTC)
From: David Schinazi <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+0166e4ab902b5632bc1bdeea9ce15dc6081e130f42bf3dc392cf000000011860607d92a169ce17fb36a2@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/2367@github.com>
Subject: [quicwg/base-drafts] Text banning post-handshake client auth is
 unclear (#2367)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5c489e7ded4e5_561a3f9b890d45bc3169a8";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/4cBJ8ID8yTgWa8-HA4r7DL0TpEs>

----==_mimepart_5c489e7ded4e5_561a3f9b890d45bc3169a8
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

draft-tls section 4.4 (Peer Authentication) states:
> A server MUST NOT use post-handshake client authentication (see Section 4.6.2 of [TLS13]).

This sounds like there are security implications, but what they are is unclear. As a reader of the document, this makes me doubt my understanding of the protocol.

If we don't have a good justification for banning this, we shouldn't be banning it.

(This is me reopening #2294 since that was closed for being a question.)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2367
----==_mimepart_5c489e7ded4e5_561a3f9b890d45bc3169a8
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p>draft-tls section 4.4 (Peer Authentication) states:</p>
<blockquote>
<p>A server MUST NOT use post-handshake client authentication (see Section 4.6.2 of [TLS13]).</p>
</blockquote>
<p>This sounds like there are security implications, but what they are is unclear. As a reader of the document, this makes me doubt my understanding of the protocol.</p>
<p>If we don't have a good justification for banning this, we shouldn't be banning it.</p>
<p>(This is me reopening <a class="issue-link js-issue-link" data-error-text="Failed to load issue title" data-id="396047663" data-permission-text="Issue title is private" data-url="https://github.com/quicwg/base-drafts/issues/2294" data-hovercard-type="issue" data-hovercard-url="/quicwg/base-drafts/issues/2294/hovercard" href="https://github.com/quicwg/base-drafts/issues/2294">#2294</a> since that was closed for being a question.)</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/quicwg/base-drafts/issues/2367">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AWbkqyDPYtevf6n9NS9CotrNsfvpnXHEks5vGJX9gaJpZM4aPOSJ">mute the thread</a>.<img src="https://github.com/notifications/beacon/AWbkqwWhJ3tC3WAt2T3ovTJfr4oFDrvrks5vGJX9gaJpZM4aPOSJ.gif" height="1" width="1" alt="" /></p>
<script type="application/json" data-scope="inboxmarkup">{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/quicwg/base-drafts","title":"quicwg/base-drafts","subtitle":"GitHub repository","main_image_url":"https://github.githubassets.com/images/email/message_cards/header.png","avatar_image_url":"https://github.githubassets.com/images/email/message_cards/avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/quicwg/base-drafts"}},"updates":{"snippets":[{"icon":"DESCRIPTION","message":"Text banning post-handshake client auth is unclear (#2367)"}],"action":{"name":"View Issue","url":"https://github.com/quicwg/base-drafts/issues/2367"}}}</script>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/issues/2367",
"url": "https://github.com/quicwg/base-drafts/issues/2367",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>
----==_mimepart_5c489e7ded4e5_561a3f9b890d45bc3169a8--