Re: [Tcpcrypt] New version of the charter text

[Joe Touch <[e-mail]>]

On 4/23/2014 10:54 AM, marcelo bagnulo braun wrote:
> El 23/04/14 19:18, Joe Touch escribió:
>>
>>
>> On 4/23/2014 10:04 AM, marcelo bagnulo braun wrote:
>> ...
>>>> > The WG will define the
>>>>> TCP extensions to perform an unauthenticated key exchange resulting in
>>>>> encryption
>>>>> without authentication.
>>>>
>>>> This implies in-band.
>>>
>>> Yes, the idea here is to provide a fully automatic mechanism, that
>>> people simply install and dont need to configure keys or anything.
>>
>> That is orthogonal as to whether the key exchange is in-band.
>>
>> Yes, a key exchange mechanism needs to be defined as part of the
>> system, but not necessarily inside the connection being protected.
>
> mmm, havent considered that.
> So the key exchange mechanism would be part of the work of the WG, correct?

Yes.

> How do you envision doing it other than inside the connection? like
> having a control connection to negotiate these things?
> (something like
> https://tools.ietf.org/id/draft-paasch-mptcp-control-stream-00.txt maybe?)

Sure- that's one possible way (i.e., that's what I meant by "in the data 
of a previous TCP connection").

I don't think we should pick in advance, though - let's see what people 
suggest first.

Joe