Re: [secdir] [Uta] [Last-Call] Secdir telechat review of draft-ietf-uta-rfc7525bis-09

[Rob Sayre <[e-mail]>]

On Thu, Jul 14, 2022 at 10:12 AM Andrei Popov <[e-mail]>
wrote:

> Speaking of PCs and servers: I took a look at Windows TLS stack telemetry
> (only including those OS versions that support TLS 1.3).
> TLS 1.2 is negotiated for 99% of the TLS server connections and 98% of the
> TLS client connections using Windows TLS stack.
> TLS 1.3 use amounts to 0.4% of TLS server connections and just under 2% of
> TLS client connections.
>

Thank you for the data-driven approach, but it definitely doesn't match
other reports. Maybe it means TLS 1.2 /could/ be negotiated for 99% of
connections?

Here is a 2019 document from the IETF:
https://www.ietf.org/blog/tls13-adoption/

thanks,
Rob




>
> Cheers,
>
> Andrei
>
> -----Original Message-----
> From: Uta <[e-mail]> On Behalf Of Peter Gutmann
> Sent: Wednesday, July 13, 2022 8:07 PM
> To: Rob Sayre <[e-mail]>; Peter Saint-Andre <[e-mail]>
> Cc: Benjamin Kaduk <[e-mail]>; [e-mail];
> [e-mail]; [e-mail]; [e-mail]
> Subject: [EXTERNAL] Re: [Uta] [Last-Call] Secdir telechat review of
> draft-ietf-uta-rfc7525bis-09
>
> Rob Sayre <[e-mail]> writes:
>
> >Also, in the realm of opinion rather than correctness: mandating TLS
> >1.2 support is misguided. Every TLS implementation maintains divided
> >codebases for 1.2 vs 1.3.
>
> On desktop PCs and servers perhaps, but in embedded the very fact that you
> need two sets of codebases means many systems will stay with 1.2, possibly
> forever when everything around them is also staying with 1.2.
>
> >No one reads the TLS 1.2 code very closely these days, in my
> >experience, so the BCP would be mandating support for something people
> >don't really work on anymore.
>
> Unless the only codebase you've got is 1.2.  However in the same embedded
> systems you typically do it once, do it right, and skip the neverending
> flow of bells and whistles that keep appearing, so there's no need to
> constantly fiddle with the code as for PC/server use.
>
> Peter.
>
> _______________________________________________
> Uta mailing list
> [e-mail]
>
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Futa&amp;data=05%7C01%7CAndrei.Popov%40microsoft.com%7Ce00ddaa9c29c46256bcf08da65461b37%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637933649036169526%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=KdWkJBgZZYtqmqbNTu58h6cXqB7eq3o%2B65rEEu5eo%2BE%3D&amp;reserved=0
>