IETF Logo Mail Archive

Re: [tcpinc] Making ECDHE-Curve25519 the only MTI for tcpcrypt

Mirja Kühlewind <ietf@kuehlewind.net> Tue, 17 October 2017 14:43 UTC

Return-Path: <ietf@kuehlewind.net>
X-Original-To: tcpinc@ietfa.amsl.com
Delivered-To: tcpinc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 065FD132F76 for <tcpinc@ietfa.amsl.com>; Tue, 17 Oct 2017 07:43:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=ietf@kuehlewind.net header.d=kuehlewind.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6bYnjUOsrP4d for <tcpinc@ietfa.amsl.com>; Tue, 17 Oct 2017 07:43:30 -0700 (PDT)
Received: from kuehlewind.net (kuehlewind.net [83.169.45.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC757134184 for <tcpinc@ietf.org>; Tue, 17 Oct 2017 07:43:29 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=kuehlewind.net; b=HTcv6jlR7anh9zYoVGOsr+ussHFmQoFo50jDESRD/HrQatbQIOmToSQXXTVnEeWdFF6fXuYevAWDMeI8PQ2VYF4/2z/0WuUgsP+4WEmOBfB4raiS3NAKVhM/jlE8L15L6o5MZlUc+qD39RQ6PdFYlDMAcO6XCE7lIFiEKiElJvA=; h=Received:Received:Subject:To:Cc:References:From:Message-ID:Date:User-Agent:MIME-Version:In-Reply-To:Content-Type:Content-Language:Content-Transfer-Encoding:X-PPP-Message-ID:X-PPP-Vhost;
Received: (qmail 23618 invoked from network); 17 Oct 2017 16:43:27 +0200
Received: from nb-10510.ethz.ch (HELO ?82.130.103.143?) (82.130.103.143) by kuehlewind.net with ESMTPSA (DHE-RSA-AES128-SHA encrypted, authenticated); 17 Oct 2017 16:43:27 +0200
To: Kyle Rose <krose@krose.org>, David Mazieres expires 2018-01-14 PST <mazieres-ddragqirgwht7ezx2d39a3jw72@temporary-address.scs.stanford.edu>, "Black, David" <David.Black@dell.com>
Cc: tcpinc <tcpinc@ietf.org>, Gregorio Guidi <greg_g@posteo.net>, ianG <iang@iang.org>
References: <D38E22E9-FBB6-40D1-BF85-D5A77F5C2365@kuehlewind.net> <20170830223758.GA73969@scs.stanford.edu> <3a8ac0e0-cd41-57c8-85a4-79c5f179385f@kuehlewind.net> <20170929203434.GA73214@scs.stanford.edu> <D78092B0-4C01-47D6-9B5D-9DB1DA5EFA83@kuehlewind.net> <877ewgrtp8.fsf@ta.scs.stanford.edu> <20171004233140.GB84701@scs.stanford.edu> <BDB8460A-E193-4C9C-BCBA-99B805F93D0A@kuehlewind.net> <e2ae6028-6ed2-c547-2a1f-f3c170b0fb89@posteo.net> <3879588f-d5ef-43c9-9d2c-7fe9c2657709@iang.org> <87h8uylfgk.fsf@ta.scs.stanford.edu> <CAJU8_nVAw3CJjaV9saKMit3rhvdWaUTZ090vMX3v0jLbAE0CQA@mail.gmail.com>
From: Mirja Kühlewind <ietf@kuehlewind.net>
Message-ID: <489870a3-58d1-eb2c-5a57-f9cf9b7f8daa@kuehlewind.net>
Date: Tue, 17 Oct 2017 16:43:27 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <CAJU8_nVAw3CJjaV9saKMit3rhvdWaUTZ090vMX3v0jLbAE0CQA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-PPP-Message-ID: <20171017144327.23609.73993@lvps83-169-45-111.dedicated.hosteurope.de>
X-PPP-Vhost: kuehlewind.net
Archived-At: <https://mailarchive.ietf.org/arch/msg/tcpinc/OFmPQesgLuclzYZiiiPrN1SWiQg>
Subject: Re: [tcpinc] Making ECDHE-Curve25519 the only MTI for tcpcrypt
X-BeenThere: tcpinc@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Working group mailing list for TCP Increased Security \(tcpinc\)" <tcpinc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tcpinc>, <mailto:tcpinc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tcpinc/>
List-Post: <mailto:tcpinc@ietf.org>
List-Help: <mailto:tcpinc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpinc>, <mailto:tcpinc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Oct 2017 14:43:32 -0000

Hi David, hi Kyle, hi all,

On 17.10.2017 16:13, Kyle Rose wrote:
 >     Question two, if no one object to this change and some people want to
 >     see it, is whether it is now too late to make this change without
 >     jeopardizing the RFC.  Can we still make such a change in last call?
 >     It's obviously not a lot of text to change, but a fairly big semantic
 >     change.  We'd appreciate guidance on this question from people with more
 >     IETF experience.
 >
 >
 > Mirja and David Black: can you provide guidance here?

Yes, if the change is the right thing to do, you should do it. If there is 
agreement in the working group to make this change, I don't think we need 
another working group last call (but that's actually in the judgment of the 
chairs). So the only question would be, do we need another IETF last call for 
this? However, the IETF last call is still running. Therefore I would like to 
ask you to bring attention about this change to the ietf@ietf.org mail list, 
meaning one of the authors could reply to the IETF last call email and 
explain that and why this change is planned. And then we can probably handle 
this basically like a last call comment and just update the draft 
respectively. In this case it would also be good if the authors could submit 
the updated version right at the end of the IETF last call, so this Friday, 
such that the ADs could review the updated version for the telechat next 
week. Would that be possible?

Mirja

v2.29.0 | Report a Bug | By Email | System Status