IETF Logo Mail Archive

Re: [TLS] Negotiating with known_configuration

Eric Rescorla <ekr@rtfm.com> Tue, 21 July 2015 15:10 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 590161B2EE8 for <tls@ietfa.amsl.com>; Tue, 21 Jul 2015 08:10:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level:
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GLzrPk1KVLI2 for <tls@ietfa.amsl.com>; Tue, 21 Jul 2015 08:10:43 -0700 (PDT)
Received: from mail-wg0-f48.google.com (mail-wg0-f48.google.com [74.125.82.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECBA21B2EF9 for <tls@ietf.org>; Tue, 21 Jul 2015 08:10:12 -0700 (PDT)
Received: by wgmn9 with SMTP id n9so159327825wgm.0 for <tls@ietf.org>; Tue, 21 Jul 2015 08:10:11 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=+bo/qxbU5pqidvg1ZLUbDn0lN5WWHKbfDu7gWKBFSXQ=; b=SQUlPHf6rU/hbfkNd3163PAZvR4Teiy/XDZTQxzxuQ0H+y3gQDG4ld/0t6IQSbSJ6o AgN5sx/FbIwOk07UC6OQfA5Fz6ZAT9YJNUGPBp2IJnufo6SxySwtclQWm9uDLZEqSIOO 2cnNgcAppTxKC/HjF7f+dhwf1au0w0EDTNvFCKub0dZ2sMOygq06PhI01CCIMAHuZ9AX 6GMthIfBWghHDKELWutJNbx10gSDEtWbBUX45InvpB5wQYMZb16fk7P3ai/1nF190ztu wk7llctAWPuLMOnUoaHzGsNKuzHuDcs5qw6UjpfYn/7LsK3jMULgvZ7nLy8Z/S7we6LT qghg==
X-Gm-Message-State: ALoCoQkIJCVQPHoimiRqDcrkkGPTtXYPl6QvankEPnv3HmXjnbnDMsWXKnVYrCjQSdBbqc4hHlC0
X-Received: by 10.180.73.244 with SMTP id o20mr33075733wiv.31.1437491411240; Tue, 21 Jul 2015 08:10:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.27.85.75 with HTTP; Tue, 21 Jul 2015 08:09:31 -0700 (PDT)
In-Reply-To: <20150721141559.GA23844@LK-Perkele-VII>
References: <CABcZeBOEUuVKHYRs5+DY6h8vcQ9uLWW9SXzN=VH=ovHbnEK0AA@mail.gmail.com> <CABkgnnUn5_Wo9XDRe=KQKO64MWcBGw0Pk6aviyigR+H7yVBaUg@mail.gmail.com> <CABcZeBP-2GudRXCHWBnWV7fnTuv-4nAzyxxY_FJx7UsPF_6KFg@mail.gmail.com> <CABkgnnVswNWk-ZOD32EvfJ=ORQWTXBPAKs51k9tRq3vspzi3jQ@mail.gmail.com> <CABcZeBNXqkJrEYFm1Z7cW4pzNcxBhsDVNZv_HNQFcXOG2x9_pg@mail.gmail.com> <20150721124110.GA20920@LK-Perkele-VII> <CABcZeBMzhsFUGDG_-8U_BJFppRzkby3B2sgz1BFargoSW+DQhg@mail.gmail.com> <20150721130850.GA21741@LK-Perkele-VII> <CABkgnnUTHOJa98u_vMfRCMoEGXUNAK6ax=1TDvVaG5Eeq3EA7w@mail.gmail.com> <20150721141559.GA23844@LK-Perkele-VII>
From: Eric Rescorla <ekr@rtfm.com>
Date: Tue, 21 Jul 2015 17:09:31 +0200
Message-ID: <CABcZeBN60pxCGQhRaqXACk75A_=i_Cs_rnVyh2zpt66q3YucDg@mail.gmail.com>
To: Ilari Liusvaara <ilari.liusvaara@elisanet.fi>
Content-Type: multipart/alternative; boundary="f46d0435c06aef5a25051b640c78"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/0yTltwcrg6KPtqv2AjjEKa_QMHY>
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Negotiating with known_configuration
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Jul 2015 15:10:45 -0000

On Tue, Jul 21, 2015 at 4:15 PM, Ilari Liusvaara <
ilari.liusvaara@elisanet.fi> wrote:

> On Tue, Jul 21, 2015 at 06:38:28AM -0700, Martin Thomson wrote:
> > On 21 July 2015 at 06:08, Ilari Liusvaara <ilari.liusvaara@elisanet.fi>
> wrote:
> > > Well, if it is about supported ciphers, there could be multiple, and
> > > the proposal has slot for only one.
> >
> > The proposal is for what the client selects and uses for its first
> flight.
>
> Oh darn, mislooked what message it was.
>
>
> Also, with regard to ending 0RTT, even without encrypted content
> types. Either I am misunderstanding something, or:
>
> - Client: Send ClientHello.
> - Server: Read ClientHello.
> - Client: Send 0-RTT & client cert.
> - Server: Read 0-RTT & client cert.
> - Client: Wait for server reply.
> - Server: Wait for handshake message to end 0-RTT.
> *deadlock*.


Is this the case where the server is accepting 0-RTT or  rejecting it?

-Ekr


>
> -Ilari
>

v2.15.0 | Report a Bug | By Email