Re: [siesta] Another Siesta approach

I'm not that sure this, being essentially a work oriented towards best-practices in TLS, would impact the ideas around SIESTA, with two probable exceptions. First, the possibility of relying on TLS as KMP (as described in RFC XXX with a potential application of DANE) Second, as a possibility to delimitate use cases well suited for TLS versus those use cases in which session-based security provides an advantage, like I think SDN and NFV are for example...

Be goode,

On 4 Dec 2013, at 12:20 , Robert Moskowitz wrote:

I saw this come through on the SAAG list, so it is appropriate to bring it up here and see how well it fits the problem statement and goals I have attempted to articulate:

=========================================

On 11/25/2013 09:27 AM, Stephen Farrell wrote:

FYI, please note this proposed new APPS area WG. We'll need
to try get a bunch of security folks involved in that so
please consider spending a few cycles to help out with the
work.

I'd say discussion of that charter would be best done on
apps-discuss@ietf.org<mailto:apps-discuss@ietf.org> since its proposed as an APPS area
WG and the apps-discuss list is probably where there's
the best concentration of relevant expertise, so please
direct any substantive discussion there.

Thanks,
S.

-------- Original Message --------
Subject: WG Review: Using TLS in Applications (uta)
Date: Fri, 22 Nov 2013 09:35:54 -0800
From: The IESG <iesg-secretary@ietf.org><mailto:iesg-secretary@ietf.org>
Reply-To: ietf@ietf.org<mailto:ietf@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org><mailto:ietf-announce@ietf.org>

A new IETF working group has been proposed in the Applications Area. The
IESG has not made any determination yet. The following draft charter was
submitted, and is provided for informational purposes only. Please send
your comments to the IESG mailing list (iesg at ietf.org<http://ietf.org>) by 2013-12-02.

Using TLS in Applications (uta)
------------------------------------------------
Current Status: Proposed WG

Assigned Area Director:
  Barry Leiba <barryleiba@computer.org><mailto:barryleiba@computer.org>

Charter:

There is a renewed and urgent interest in the IETF to increase the
security of transmissions over the Internet. Many application protocols
have defined methods for using TLS to authenticate the server (and
sometimes the client), and to encrypt the connection between the client
and server. However, there is a diversity of definitions and
requirements, and that diversity has caused confusion for application
developers and also has led to lack of interoperability or lack of
deployment. Implementers and deployers are faced with multiple security
issues in real-world usage of TLS, which currently does not preclude
insecure ciphers and modes of operation.

This WG has the following tasks:

- Update the definitions for using TLS over a set of representative
application protocols.  This includes communication with proxies, between
servers, and between peers, where appropriate, in addition to
client/server communication.

- Specify a set of best practices for TLS clients and servers, including
but not limited to recommended versions of TLS, using forward secrecy,
and one or more ciphersuites and extensions that are mandatory to
implement.

- Consider, and possibly define, a standard way for an application client
and server to use unauthenticated encryption through TLS when server
and/or client authentication cannot be achieved.

- Create a document that helps application protocol developers use TLS in
future application definitions.

The initial set of representative application protocols is SMTP, POP,
IMAP, XMPP, and HTTP 1.1. It is expected that other protocols that use
TLS might later be updated using the guidelines from this WG, and that
those updates will happen through other WGs or through individual
submissions.

The WG will make the fewest changes needed to achieve good interoperable
security for the applications using TLS.  No changes to TLS itself will
be made in this WG, and the WG will ensure that changes to current
versions of popular TLS libaries will not be required to conform to the
WG's specifications.

This WG will collaborate with other IETF WGs, in particular with the TLS
and DANE WGs.

Milestones:

_______________________________________________
siesta mailing list
siesta@ietf.org<mailto:siesta@ietf.org>
https://www.ietf.org/mailman/listinfo/siesta

--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez
Telefonica I+D
http://people.tid.es/diego.lopez/

e-mail: diego@tid.es
Tel:    +34 913 129 041
Mobile: +34 682 051 091
-----------------------------------------

________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at:
http://www.tid.es/ES/PAGINAS/disclaimer.aspx