IETF Logo Mail Archive

Re: [TLS] The future of external PSK in TLS 1.3

"Salz, Rich" <rsalz@akamai.com> Wed, 30 September 2020 15:12 UTC

Return-Path: <rsalz@akamai.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 238B83A0ABE for <tls@ietfa.amsl.com>; Wed, 30 Sep 2020 08:12:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.299
X-Spam-Level:
X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vtxQN_HOp0ZG for <tls@ietfa.amsl.com>; Wed, 30 Sep 2020 08:12:31 -0700 (PDT)
Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B4873A0C25 for <tls@ietf.org>; Wed, 30 Sep 2020 08:12:31 -0700 (PDT)
Received: from pps.filterd (m0122331.ppops.net [127.0.0.1]) by mx0b-00190b01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 08UFAMMY023249; Wed, 30 Sep 2020 16:12:28 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=Pm/P+G0ZbLvUZkaTB64wv7rSjcsDVmJn5XQ1mghkrCY=; b=EMgN5fQoJZUGL3oMZ7Baf0C8sLJXp2oTdd09oC6Wu60WTkyVSr2tz9HjcLjg600Tv0Eh yJTDi4xg7ODNbi76vuGgRDUW0k0AqyRlrCGdalt+SUOx4ll7r6ycBPjWgmRHLEnCiS9Q RSPE24z2qDGwOeOpu8wjLLQ2M8BY0B8AGN/1R+RBRNyyS00gQ70D9K5nI3uwYlX8IcL4 ebLNOkj+RKXw3ttN+9ctgdXC+TUeLAQKizdZj0YH6+NJEhAdy0AY2WK5phxHx4fsI01U o0Y+CfyrLQqAIHNzHAaXTvCNneJ9LI7mM4dwVQbOdcJK+N6qse8YeQUo2SWZL18UqcZh GQ==
Received: from prod-mail-ppoint1 (prod-mail-ppoint1.akamai.com [184.51.33.18] (may be forged)) by mx0b-00190b01.pphosted.com with ESMTP id 33sth20tav-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 30 Sep 2020 16:12:28 +0100
Received: from pps.filterd (prod-mail-ppoint1.akamai.com [127.0.0.1]) by prod-mail-ppoint1.akamai.com (8.16.0.42/8.16.0.42) with SMTP id 08UF5SAw022456; Wed, 30 Sep 2020 11:12:28 -0400
Received: from email.msg.corp.akamai.com ([172.27.123.34]) by prod-mail-ppoint1.akamai.com with ESMTP id 33t0yy40y7-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 30 Sep 2020 11:12:28 -0400
Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb1.msg.corp.akamai.com (172.27.123.101) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 30 Sep 2020 11:12:27 -0400
Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1497.006; Wed, 30 Sep 2020 11:12:27 -0400
From: "Salz, Rich" <rsalz@akamai.com>
To: Achim Kraus <achimkraus@gmx.net>, "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] The future of external PSK in TLS 1.3
Thread-Index: AQHWln3ZPwzr8fTsOkSjvpJZy/djPKmAFvMAgACAn4CAAAVSAIAATFuAgABh/IA=
Date: Wed, 30 Sep 2020 15:12:27 +0000
Message-ID: <2AB4BDCE-9940-47E8-8EAB-41B9BECC559D@akamai.com>
References: <CACsn0c=5gsp0ivVmB-prBMXg=Ot9mo8YVzFgt-bW3G6osveggg@mail.gmail.com> <8EE5C9C0-8C51-4148-916D-54017101B2B5@ll.mit.edu> <0a38bf36-55e5-efbe-b5bb-66e0d5e85f4b@gmx.net>
In-Reply-To: <0a38bf36-55e5-efbe-b5bb-66e0d5e85f4b@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.40.20081201
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [172.27.118.139]
Content-Type: text/plain; charset="utf-8"
Content-ID: <67949B45DEB5204F99A0727C9E6493D6@akamai.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-09-30_08:2020-09-30, 2020-09-30 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxscore=0 phishscore=0 mlxlogscore=826 malwarescore=0 suspectscore=0 adultscore=0 bulkscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2006250000 definitions=main-2009300121
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-09-30_08:2020-09-30, 2020-09-30 signatures=0
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/12klMFwj6Lx9Q66icEDbH41-Hfs>
Subject: Re: [TLS] The future of external PSK in TLS 1.3
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2020 15:12:39 -0000

PSK is in the RFC. And in fact we made a point of unifying it and other mechanisms in the protocol.

If someone wants to say PSK isn't recommended, then they need to do the work to get an RFC published that says so.

v2.27.8 | Report a Bug | By Email | System Status