Re: [Tls-reg-review] Request to register TLS integrity only cipher suites for TLS 1.3

[Nick Sullivan <[e-mail]>]

I guess there's no requirement for a TLS 1.3 ciphersuite to be literal
AEAD, is there?

It should be fine to assign two "not recommended" points.

On Tue, Dec 11, 2018 at 6:32 PM Salz, Rich <[e-mail]> wrote:

> Seems legit to me.  Anyone else have a view?
>
> On 12/5/18, 2:54 PM, "Nancy Cam-Winget (ncamwing)" <[e-mail]>
> wrote:
>
>         > Contact Name:
>         > Nancy Cam-Winget
>         >
>         > Contact Email:
>         > [e-mail]
>         >
>         > Type of Assignment:
>         > "Not Recommended" TLS Cipher suite assignment
>         >
>         > Registry:
>         > TLS 1.3 cipher suite
>         >
>         > Description:
>         > At least two IoT (ODVA and IEC) forums are requesting the need
> for
>         > enabling TLS 1.3 with integrity only protection in the data
> plane.
>         > Under security considerations, we are not recommending this
> cipher
>         > suite to be widely used and note that no privacy is provided
> when this
>         > cipher suite is used and several use cases have been noted where
>         > privacy is not required.
>         >
>         > Additional Info:
>         > We have noted the use cases and security (and privacy)
> considerations
>         > in
> https://tools.ietf.org/html/draft-camwinget-tls-ts13-macciphersuites-01
> as well as how the cipher suite would be used with
>         > TLS 1.3
>
>
>
>     _______________________________________________
>     tls-reg-review mailing list
>     [e-mail]
>     https://www.ietf.org/mailman/listinfo/tls-reg-review
>
>
> _______________________________________________
> tls-reg-review mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/tls-reg-review
>