Re: [quicwg/base-drafts] Resume HTTP/2 TLS from QUIC ? (#941)

[ekr <[e-mail]>]

On Sun, Nov 19, 2017 at 5:06 AM, Subodh Iyengar <[e-mail]>
wrote:

> @davidben <https://github.com/davidben> ya i mentioned that in a previous
> comment that tls tickets would have to have the quic params in them :) A
> QUIC compatible server would be aware that clients would use TLS 1.3 + TCP
> connections to them and send them the same ticket.
>
> We should probably also have a MUST restriction that this sharing should
> only be limited to TLS 1.3 + TCP clients (and maybe TLS 1.2 with Extended
> master secret) otherwise we end up running into issues with the session
> ticket for TLS 1.2 being reusable for 1.3 creating the potential for triple
> handshake like attacks.
>

I think we should just say TLS 1.3. I don't even know how to reason about
TLS 1.2 -> TLS 1.3 resumption, but I know it has non-awesome security
properties b/c of the key ladder.



> —
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly, view it on GitHub
> <https://github.com/quicwg/base-drafts/issues/941#issuecomment-345471223>,
> or mute the thread
> <https://github.com/notifications/unsubscribe-auth/ABD1odv-ATn0vpkiVpTAnqxx0bEigpNiks5s30brgaJpZM4QhXjN>
> .
>


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/941#issuecomment-345473631