IETF Logo Mail Archive

Re: [secdir] [Last-Call] Secdir telechat review of draft-ietf-uta-rfc7525bis-09

Peter Saint-Andre <stpeter@stpeter.im> Thu, 14 July 2022 00:31 UTC

Return-Path: <stpeter@stpeter.im>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 298B8C157B5D; Wed, 13 Jul 2022 17:31:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.128
X-Spam-Level:
X-Spam-Status: No, score=-2.128 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=stpeter.im header.b=VX6a4uL9; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=y3hNXPzc
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U65A5SbifcU7; Wed, 13 Jul 2022 17:31:49 -0700 (PDT)
Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C96BEC157B43; Wed, 13 Jul 2022 17:31:49 -0700 (PDT)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 289865C0004; Wed, 13 Jul 2022 20:31:49 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Wed, 13 Jul 2022 20:31:49 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=stpeter.im; h=cc :cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=fm1; t=1657758709; x= 1657845109; bh=aU9L1pXHKdS6D8g0QQgE43IloCf/VhOkfG7ndE/paFs=; b=V X6a4uL9euIIBhtGK1wySogYxlEwudzUHoHnx07TngWMMU/6UJiaeBqjBZUAcgX1H Ezt6hLMprrvrsIaN9JB4dPFm8XrbksXrjVFeYYumfavLdFjJXezEW65XSmWhztaW N4mrvAi8SsNovAgNnH/0L2Zkzy5Ia2xJy32Eqvc7ahwCsufs+bG7PeSWGUUcf/XT b/PS4w7JHcGYWg9a1tHa77/YaduwmaWOvKLHxkJtN0BfPdzmVG3CMDfUAFQwHnHY KyqEr/6ywlsluQv52znEFQZWAyosnU1m2fqmKHnGedhKp6149IGvgAx+kVwkGvC4 gTAdLKeJAL5H6GBSIn8tg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1657758709; x= 1657845109; bh=aU9L1pXHKdS6D8g0QQgE43IloCf/VhOkfG7ndE/paFs=; b=y 3hNXPzciJTrbhKrAdmSKAjg/yqQ9W4i625HgBvsQDkj0p7gpXYrC7eADapYQpiNr vcs5M1FlMUAjXIpBd9Vzia+WUfZDBk6+WO1PNJglbzPq6SRro0/KT9bt7d7Jh3rO u97fpCUYyvjVKOWmhxIHSQtgp9T5KbzoR3glejEtE2XJZS6yhNvXLocbV0IAVmoC vouAW3GU6LQC7Rm056rt389FCvuZllkL38/Lnsipwvd79fFHe7g0crHTjRRaqKN9 zKPdTwCQXxGuluv8d3dqUGdLXtxrAo4RvvpEEJ3cneTTgJ7Ad/J+6rrzRUiEUDNG yDPIAxJjqDPFFJSyq23lg==
X-ME-Sender: <xms:9GPPYhLTkajj4wv19AJkYbWFcdVMFO0UBnVENrrHgrZa1TMo7HwJVQ> <xme:9GPPYtImR0KRGhCerpFD-x6wRYdW-jLT8qSYTFazBAhw-l0wp2XwYE641T-JsnmZ8 Gr1-M3Q3zLejoSdGw>
X-ME-Received: <xmr:9GPPYpuLJAKIMeF52h0cXGKDfVwoChN74NI1-UcyQEsxJQwAlY0lSdkj7MfV>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvfedrudejkedgfeehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepkfffgggfuffvvehfhfgjtgfgsehtkeertddtfeejnecuhfhrohhmpefrvght vghrucfurghinhhtqdetnhgurhgvuceoshhtphgvthgvrhesshhtphgvthgvrhdrihhmqe enucggtffrrghtthgvrhhnpeeiudffveejheevfeelhfdtgfdvfeehffehveelvdfhudei leetvedvtdfhffeijeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrih hlfhhrohhmpehsthhpvghtvghrsehsthhpvghtvghrrdhimh
X-ME-Proxy: <xmx:9GPPYiYfxCDV6mUY0M4ZiRbNiPL9ovPrKur5cccRxLBI28KNnIOgJA> <xmx:9GPPYoYryQ7XsPcmt25nWV_demdgYK7HUvE5GZ_NCbrQxD6aCAyl_A> <xmx:9GPPYmCIMN2WHCsGcoFFkrC_8umjJO2cxEUi_eVK_rZJV-m1B8UMVg> <xmx:9WPPYtMgQgDHc-to57S5u4T-G4iSIV6tVkQv0Iul8eB0h1QzK8qPTw>
Feedback-ID: i24394279:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 13 Jul 2022 20:31:48 -0400 (EDT)
Message-ID: <795e1571-4862-831e-e77a-036bb562c6d9@stpeter.im>
Date: Wed, 13 Jul 2022 18:31:47 -0600
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.11.0
Content-Language: en-US
To: Rob Sayre <sayrer@gmail.com>
Cc: Benjamin Kaduk <kaduk@mit.edu>, "Salz, Rich" <rsalz@akamai.com>, "draft-ietf-uta-rfc7525bis.all@ietf.org" <draft-ietf-uta-rfc7525bis.all@ietf.org>, "last-call@ietf.org" <last-call@ietf.org>, "secdir@ietf.org" <secdir@ietf.org>, "uta@ietf.org" <uta@ietf.org>
References: <165766858084.5251.12485129434316295805@ietfa.amsl.com> <b24e2934-200f-4f80-5261-aa2a977da39b@stpeter.im> <CAChr6Syq+uOTJsvqWuSustq_HdTaXCtDepyCuRWx+jGoEB06Fw@mail.gmail.com> <CAChr6SzkAmbjGK4XOwPkSwssLoG4NW1yG-6b2aFdFr43yF2zwQ@mail.gmail.com> <c516d0e4-f477-a4fb-2638-3615434f48f2@stpeter.im> <CAChr6SwgwknvgAycr6s=6tCRQZoZdiJxRXJpoTejEcW7g+bv=A@mail.gmail.com> <359BC9EA-FB6D-49E8-8CA6-AA395114838B@akamai.com> <cd793161-3535-41f8-a6f3-ed5b160048c6@stpeter.im> <CAChr6Sy=Jm-jTRxcyy8fTY_6qFxufFcmwK_3NoRai-1Qe=h_kw@mail.gmail.com>
From: Peter Saint-Andre <stpeter@stpeter.im>
In-Reply-To: <CAChr6Sy=Jm-jTRxcyy8fTY_6qFxufFcmwK_3NoRai-1Qe=h_kw@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/T18RRbnFk_rmtFfLTUjSnYJ_hnc>
Subject: Re: [secdir] [Last-Call] Secdir telechat review of draft-ietf-uta-rfc7525bis-09
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jul 2022 00:31:54 -0000

On 7/13/22 6:29 PM, Rob Sayre wrote:
> Hi,
> 
> I think the main problem would be that the handshake is vastly different.
> 
> I don’t care which document the deprecation happens in, because I am right.

Great. Perhaps you could start work on an Internet-Draft entitled 
"Deprecating TLS 1.2" along the lines of RFC 8996. Once it gains IETF 
consensus, it could update rfc7525bis.

Peter

v2.23.0 | Report a Bug | By Email