IETF Logo Mail Archive

Re: [Tls-reg-review] EXTERNAL: Re: [IANA #1132414] Re: Request to register TLS integrity only cipher suites for TLS 1.3

Benjamin Kaduk <kaduk@mit.edu> Mon, 14 December 2020 02:29 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: tls-reg-review@ietfa.amsl.com
Delivered-To: tls-reg-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1AF33A0ADA; Sun, 13 Dec 2020 18:29:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.002
X-Spam-Level:
X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xT1t7R0u-AKI; Sun, 13 Dec 2020 18:29:35 -0800 (PST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 410703A0AD8; Sun, 13 Dec 2020 18:29:34 -0800 (PST)
Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 0BE2TOvw010787 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 13 Dec 2020 21:29:29 -0500
Date: Sun, 13 Dec 2020 18:29:24 -0800
From: Benjamin Kaduk <kaduk@mit.edu>
To: Jack Visoky <jmvisoky=40ra.rockwell.com@dmarc.ietf.org>
Cc: "ncamwing@cisco.com" <ncamwing@cisco.com>, "Salz, Rich" <rsalz@akamai.com>, "tls-reg-review@ietf.org" <tls-reg-review@ietf.org>
Message-ID: <20201214022924.GR64351@kduck.mit.edu>
References: <rt-4.4.3-21493-1544578196-1273.1132414-37-0@icann.org> <B8FCF390-4B0A-46BC-B3AB-E92A7C7D4FCF@akamai.com> <rt-4.4.3-23334-1544633480-1124.1132414-37-0@icann.org> <rt-4.4.3-4154-1544656355-1253.1132414-37-0@icann.org> <6D19FB88-FBA8-4F50-A004-067AE6218344@akamai.com> <20201210004439.GB64351@kduck.mit.edu> <96E22077-B954-4C3C-82AC-E311594D71A3@akamai.com> <20201210025635.GD64351@kduck.mit.edu> <DM5PR2201MB16432264A0EDF46FFCF2034B99CB0@DM5PR2201MB1643.namprd22.prod.outlook.com> <ED1241A7-6CA4-468F-BAFC-831F9642D683@akamai.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <ED1241A7-6CA4-468F-BAFC-831F9642D683@akamai.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls-reg-review/SAYgw10b2gBS0_HgR_W2g0JG6MI>
Subject: Re: [Tls-reg-review] EXTERNAL: Re: [IANA #1132414] Re: Request to register TLS integrity only cipher suites for TLS 1.3
X-BeenThere: tls-reg-review@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: TLS REVIEW <tls-reg-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls-reg-review>, <mailto:tls-reg-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls-reg-review/>
List-Post: <mailto:tls-reg-review@ietf.org>
List-Help: <mailto:tls-reg-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls-reg-review>, <mailto:tls-reg-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Dec 2020 02:29:37 -0000

On Thu, Dec 10, 2020 at 11:01:40PM +0000, Salz, Rich wrote:
> > I think we can use the reasoning that the record is not encrypted for these cipher suites so the sequence numbers are also not encrypted.
> 
> >    All that said, we should make this explicit in our RFC 
> 
> Sounds good to me!

In the interest of clarity, this sounds good to me as well.

Thanks,

Ben

v2.23.0 | Report a Bug | By Email