Re: Historic TLS Discussion

Lucas Pardue <lucaspardue.24.7@gmail.com> Mon, 22 January 2024 19:00 UTC

Return-Path: <lucaspardue.24.7@gmail.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83D8AC151981 for <quic@ietfa.amsl.com>; Mon, 22 Jan 2024 11:00:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.857
X-Spam-Level:
X-Spam-Status: No, score=-6.857 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fiHgZ8bWRVzn for <quic@ietfa.amsl.com>; Mon, 22 Jan 2024 11:00:31 -0800 (PST)
Received: from mail-qk1-x72a.google.com (mail-qk1-x72a.google.com [IPv6:2607:f8b0:4864:20::72a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9836C151076 for <quic@ietf.org>; Mon, 22 Jan 2024 11:00:31 -0800 (PST)
Received: by mail-qk1-x72a.google.com with SMTP id af79cd13be357-78324e302d4so321675585a.1 for <quic@ietf.org>; Mon, 22 Jan 2024 11:00:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1705950030; x=1706554830; darn=ietf.org; h=subject:cc:to:from:date:references:in-reply-to:message-id :mime-version:user-agent:feedback-id:from:to:cc:subject:date :message-id:reply-to; bh=OFIVmm9/mB4ErlycvehL4/AsHMW4gN5RASEgKiyKuj0=; b=UwlHvsDdOt0eeAF3dWNOVINbpqbYUSI4NABvoNIJ9URBJEL500eyBj8hqbgvA57VDx 9oSozIsnNkBZCYBhjU27l5nZ7DU0D2nvMFBQYSsCTYU5G1CX/pkHt867iavS3wJeOIbb RIYXPcG/7l5cqoSleJkzyoqAV1wBSFtLO/QxptQGW0w6h7+qbwXFCj/xlDeqSxq+yHKF XM9Qz5Hd2m9kmuZkx/BKODc+hs8eHD8Cb1yiDfD1CQFTze+n9k0i53oohNXjIOiJA+2c gSrRKbYjfLU9np0Pe0pMoCnEMB0a1bHQj8UQkhSPMtpucPqaCoqc/Jl5561DXXn+FPlx 9cag==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1705950030; x=1706554830; h=subject:cc:to:from:date:references:in-reply-to:message-id :mime-version:user-agent:feedback-id:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=OFIVmm9/mB4ErlycvehL4/AsHMW4gN5RASEgKiyKuj0=; b=jvykG0Db3nWNUJyBj/JMwOeCRbNONvq+l8CBz/vti/d0CkIWG4pcaBQl9XrLpzvXZu 9X9pKOQdkYjJLMBblcgUexv0q7tffbeUf1T/fubf6Uvc25QmBNEjEWLu7v6sZSFQza/i sxF4yVPQ9VqD9ogmDNpl1V0QlATROY2DrnX2KV2HuQktwKxRK4LBhgQcAyeHOGVQBqTz ++rmwHDlV9JaMiqxw0FhQLTWR4kKSm9+1s2q6guPTV/J98Tder3Fd1WPSE71ZzgF7pOU ClA6ZRIVulNxWL2dFQLiIxXMXNW38NjxJe+bPefLrQZC/6ajbIIvlsdr2slxqosqyd2w /9Dw==
X-Gm-Message-State: AOJu0YylrsfJi/P0xd4gTpclvOwU5GJkpchOI/sztpBGVUmhZ24/a/E1 uWIWCjil2p/us08PYIZ9F+W3I1emdEPIGFlyPduyuK0sXZT8AfuFJLec4sGT
X-Google-Smtp-Source: AGHT+IGVNuB3zGuDVpkE4LkX/Kcge6r3Vq+DIiptEey2z1bcsVoDlJmf4Rkm2TLazAD/kqE97IPSSQ==
X-Received: by 2002:a05:620a:3194:b0:783:82b0:b67b with SMTP id bi20-20020a05620a319400b0078382b0b67bmr7214417qkb.20.1705950030327; Mon, 22 Jan 2024 11:00:30 -0800 (PST)
Received: from auth2-smtp.messagingengine.com (auth2-smtp.messagingengine.com. [66.111.4.228]) by smtp.gmail.com with ESMTPSA id z21-20020a05620a101500b007832895cf8csm2342738qkj.38.2024.01.22.11.00.29 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 22 Jan 2024 11:00:29 -0800 (PST)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailauth.nyi.internal (Postfix) with ESMTP id 6687527C0061; Mon, 22 Jan 2024 14:00:29 -0500 (EST)
Received: from imap53 ([10.202.2.103]) by compute3.internal (MEProxy); Mon, 22 Jan 2024 14:00:29 -0500
X-ME-Sender: <xms:TLuuZebbhox-TfPdeD1HDgZFCLc-5N44_wJ-uwwMoY4lKdzSQmJ97w> <xme:TLuuZRZh-nKOMM62ZoZMH-1111X13rrrREjY2kp7JsnYlpDvC93SkZpb5GN1ssscj JvEFGLXyxSGm2k2VkI>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdekiedguddukecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpefofgggkfgjfhffhffvvefutgesrgdtreerreerjeenucfhrhhomhepfdfn uhgtrghsucfrrghrughuvgdfuceolhhutggrshhprghrughuvgdrvdegrdejsehgmhgrih hlrdgtohhmqeenucggtffrrghtthgvrhhnpedtkeejueehuefhgfejgefhveelheffhfdu ffdvkedugfejgeeuheekkeejieejffenucffohhmrghinhephihouhhtuhdrsggvpdgrkh grrdhmshenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhm pehluhgtrghsodhmvghsmhhtphgruhhthhhpvghrshhonhgrlhhithihqddugeegtdehge dvkedtqdeftdehieegudehvddqlhhutggrshhprghrughuvgdrvdegrdejpeepghhmrghi lhdrtghomheslhhutggrshhprghrughuvgdrtghomh
X-ME-Proxy: <xmx:TbuuZY9yfXNX89DDMJ6BSDA1YXamDmVQnsOPg0ziUfyJe5PHOrvuTw> <xmx:TbuuZQqtDcT03b2gYaBA0QxlwAz3_ZPbTC9s227gegKLtqhn3joteg> <xmx:TbuuZZptxTB4t5dN9PGAorFPSuuRgMyhEmb1RYKeSPiE6yQ_IF93lg> <xmx:TbuuZYSySlWl46y-lJDJ4gNw-OB3ZXvvSEwPopVYj0jiXhBrwJdJsKdp0Vk>
Feedback-ID: i2dd14938:Fastmail
Received: by mailuser.nyi.internal (Postfix, from userid 501) id D5D4A364006F; Mon, 22 Jan 2024 14:00:28 -0500 (EST)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.11.0-alpha0-119-ga8b98d1bd8-fm-20240108.001-ga8b98d1b
MIME-Version: 1.0
Message-Id: <26d26d1a-c2f7-4dd9-845f-9b887434a6ca@app.fastmail.com>
In-Reply-To: <SA1PR04MB8561E4F097BB5DAD304C76A9BF752@SA1PR04MB8561.namprd04.prod.outlook.com>
References: <SA1PR04MB8561BABF161D2CF980526E56BF752@SA1PR04MB8561.namprd04.prod.outlook.com> <CACcvr==ik5+A-b5E2VsQGU4k42U7oAsJKNdaKXMANWY11Ae-4g@mail.gmail.com> <SA1PR04MB8561E4F097BB5DAD304C76A9BF752@SA1PR04MB8561.namprd04.prod.outlook.com>
Date: Mon, 22 Jan 2024 19:00:06 +0000
From: Lucas Pardue <lucaspardue.24.7@gmail.com>
To: Nicholas Warren <nwarren@barryelectric.com>, Nick Harper <ietf@nharper.org>
Cc: "quic@ietf.org" <quic@ietf.org>
Subject: Re: Historic TLS Discussion
Content-Type: multipart/alternative; boundary="7588be4d699448aca87c2233eecc8db5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/AKPmcst-vPay1bOY4mj4kI8TdVY>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jan 2024 19:00:32 -0000

Hey,

On Mon, Jan 22, 2024, at 18:33, Nicholas Warren wrote:
> Nick,
>  
> I had read over the discussion from 2020 (A non-TLS standard is needed) and it sounded like TLS was an axiom of the working group.
>  
> Thank you for the quick clarification.
You might be interested in going further back to the BoF meeting at IETF96. Martin Thomson gives an overview of 
QUIC & TLS at around the 48 minute mark and addresses briefly some of the why for TLS: https://youtu.be/aGvFuvmEufs

To be clear though, it's possible to swap out TLS for something else if you to do the work. I'm aware of a few different approaches, although none have been proposed for standardization.

Cheers
Lucas
>  
> Nich Warren
>  
> *From:* Nick Harper <ietf@nharper.org> 
> *Sent:* Monday, January 22, 2024 12:25 PM
> *To:* Nicholas Warren <nwarren@barryelectric.com>
> *Cc:* quic@ietf.org
> *Subject:* Re: Historic TLS Discussion
> 
>  
> 
> You don't often get email from ietf@nharper.org. Learn why this is important <https://aka.ms/LearnAboutSenderIdentification>
> 
> That discussion would've happened during the WG formation. That QUIC uses TLS has been in the WG charter since the first draft that I see on the datatracker, and the original approved charter calls out a key goal of "Providing always-secure transport, using TLS 1.3 by default."
>  
> On Mon, Jan 22, 2024 at 10:12 AM Nicholas Warren <nwarren@barryelectric.com> wrote:
>> Hello quic wg.
>>  
>> I am curious about how quic seemingly mandates usage of TLS (rfc9000 section 5); albeit I have not completely read quic-tls.
>>  
>> Does anyone remember when you all discussed this? I was hoping to go back and read the archived list from when the discussion had taken place.
>>  
>> Thanks,
>> Nich Warren