IETF Logo Mail Archive

Re: [saag] [Curdle] Time for SSH3?

Stephen Farrell <stephen.farrell@cs.tcd.ie> Thu, 21 December 2023 02:03 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72C5CC1AE967 for <saag@ietfa.amsl.com>; Wed, 20 Dec 2023 18:03:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.008
X-Spam-Level:
X-Spam-Status: No, score=-7.008 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id reEqSNSnkNVB for <saag@ietfa.amsl.com>; Wed, 20 Dec 2023 18:03:47 -0800 (PST)
Received: from EUR03-AM7-obe.outbound.protection.outlook.com (mail-am7eur03on2124.outbound.protection.outlook.com [40.107.105.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B84DC1AE95A for <saag@ietf.org>; Wed, 20 Dec 2023 18:03:46 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=O1ROgiwEjseJQgXBQdERC1LsFMSrILJDxKOp6fl5pMLDL8ZFzEKQtA75+D+3REZLTEcWzI9E+5jSj9qHEyr6tZ1IJ0iwa9I5cOJc1eP04UwfOPTBZGkb8ySby8KhNs9/848vUQxyUn+lglMoR7RZBbqrOia/MxBKo3nUw6vnmStYd4/rXagFZC0ZF0z12fOyYygLTcFaoRUKo5Im6IJN1rGPaSadxL1fKIl8AXewr54HRKwQphanVeKWzIY7pJuhVdmsB5yOGgJavtq9FiMy+yIiZyN+afqJgj/+G26CaRCsyDbQ/bGZQo1uTf7P1CSrP6iEKz30lcZz23Wpvt6H3Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=0NHbnyqQxZcNAUo9zNgSc9qY9YFbtRVHkOXEPcUqe+0=; b=RIqy1HvL0Err8M8tWyxRELAwbI1BfCnNEw+eXc4iC3eruVHY880Y8laP4IfkvckFlg3AvMDba8jxwG35R5dbEKWkXf7S3AmvsJQFs0wmudbeHOYLZXSCEEnU4H5CJ7InUKuQ0YQCTsllSo4aY4onXAKQT+bRYu8L2i1p/VyRSA2HMnLIfLKz8JPv4JHVlgMQVLky7lEZI4MYAZIm2MLLR1TCQEuRc1TnnWYawLVmAxMswY/IJD5e3L2xNsw+7XvbxBy4bXwg890uoOgETICSp637KpNpkPSaFig0EGVNIO/8cOMAynD+G99CO6Wf+rpoXxJJ+4cuZerv2hA8YNntCQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0NHbnyqQxZcNAUo9zNgSc9qY9YFbtRVHkOXEPcUqe+0=; b=T1q3ot2hZ15aCxOydXzT+56Iv5DvozLdlbGU4Fx9Z4GpIQYnTPQjumMd/6OqBNFyXwMMz8UVYbFnETX6OApZICVdALht3iwzooa13aqo8FzfVvzVP55pwHfIO461NJx3rjcnE0uMFfvoId2QDF+j/l344/4tp27MVnuylowr1ZqmYasw4Nk8Kb7pB3mpm4GwXGRein4q+/t3YNSeLL2iNBrvLQWQAdwK4a7wp+7se+Ja3/yxui/Wyp3dzK6z888BwhvKtflTg8NPf1blmAksYeymbpAvo0LJUYgl4XUvP38I32aQYZCnaMHm/qzQ+2rPf8fC7x+8Ki1ZJ4pNwkPUsQ==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from DB7PR02MB5113.eurprd02.prod.outlook.com (2603:10a6:10:77::15) by DB9PR02MB6761.eurprd02.prod.outlook.com (2603:10a6:10:219::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7113.18; Thu, 21 Dec 2023 02:03:43 +0000
Received: from DB7PR02MB5113.eurprd02.prod.outlook.com ([fe80::d7cb:f7b5:ad53:c139]) by DB7PR02MB5113.eurprd02.prod.outlook.com ([fe80::d7cb:f7b5:ad53:c139%5]) with mapi id 15.20.7113.019; Thu, 21 Dec 2023 02:03:43 +0000
Message-ID: <e8afab20-71db-4e08-a039-bf53b903974d@cs.tcd.ie>
Date: Thu, 21 Dec 2023 02:03:41 +0000
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: Peter Gutmann <pgut001@cs.auckland.ac.nz>
Cc: saag <saag@ietf.org>
References: <GVXPR07MB96789816DE49A02D46AC25628996A@GVXPR07MB9678.eurprd07.prod.outlook.com> <SY4PR01MB6251678A7FD714B5CDC26A8FEE96A@SY4PR01MB6251.ausprd01.prod.outlook.com> <30cd214d9666d142cd8987ead79d5b42.squirrel@mail.ihtfp.org> <20231220163501.GB297455@mit.edu> <2b86631f-1d3c-4a58-a668-233d36368a36@cs.tcd.ie> <CAPDSy+5=LjQ6Tk_s_-61dbSZ+Bd39OCQE9iyH+8fR3cv6ZfiMg@mail.gmail.com> <CADqLbz+HnA4UPcDPSm_-v9ih8N-F8P+meSeppwkNKW6-24FvYQ@mail.gmail.com> <SY4PR01MB625125FF67B962FC34B8099BEE95A@SY4PR01MB6251.ausprd01.prod.outlook.com>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <SY4PR01MB625125FF67B962FC34B8099BEE95A@SY4PR01MB6251.ausprd01.prod.outlook.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------s00aw5SEGSscWuwSLBHC2Z8Y"
X-ClientProxiedBy: DB9PR06CA0014.eurprd06.prod.outlook.com (2603:10a6:10:1db::19) To DB7PR02MB5113.eurprd02.prod.outlook.com (2603:10a6:10:77::15)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB7PR02MB5113:EE_|DB9PR02MB6761:EE_
X-MS-Office365-Filtering-Correlation-Id: c69438d3-18a9-4c02-72e3-08dc01c90ef9
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB7PR02MB5113.eurprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(346002)(376002)(396003)(366004)(39860400002)(136003)(230922051799003)(64100799003)(451199024)(186009)(1800799012)(38100700002)(36756003)(41300700001)(31696002)(86362001)(44832011)(478600001)(8676002)(8936002)(2906002)(6486002)(2616005)(45080400002)(66476007)(6916009)(83380400001)(31686004)(66556008)(66946007)(21480400003)(786003)(316002)(53546011)(5660300002)(235185007)(33964004)(6512007)(4326008)(6506007)(45980500001)(43740500002); DIR:OUT; SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: c69438d3-18a9-4c02-72e3-08dc01c90ef9
X-MS-Exchange-CrossTenant-AuthSource: DB7PR02MB5113.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Dec 2023 02:03:43.2128 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 4x1iaK22yvpiqQFr+NemtOfm9mYhyhHGGjn3N/MuS+NQyZxgA8V2dpXJIUa4Uymc
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR02MB6761
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/FAh8yLpBym8x071xrHihIWew3oA>
Subject: Re: [saag] [Curdle] Time for SSH3?
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Dec 2023 02:03:51 -0000

Hiya,

(Truncating the cc to saag...)

On 21/12/2023 01:36, Peter Gutmann wrote:
>   I've still got bug-workarounds for 20-year-old SSH bugs in
> my code because systems are still running that, the last thing you want to do
> is throw a completely new incompatible protocol into that situation.

This topic (i.e. new crypto stuff vs. not breaking legacy
things), is obviously one that recurs. And there are good
and bad arguments from various angles.

I wonder would it be useful to try characterise the good
(and bad) arguments for making changes and the good (and
bad) arguments for not making changes in a document?

Reason to ask is we often see this play out when a new
thing is proposed and it might help those discussions if
we could refer to good/bad argument #10 to short-circuit
those discussions. (And it's also been a while since Peter
was involved in an I-D that took a decade or two to end
up as an RFC, so roping him in on another could be a bit
funny:-)

Cheers,
S.

v2.46.0 | Report a Bug | By Email | System Status