Return-Path: X-Original-To: tls@ietfa.amsl.com Delivered-To: tls@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64022C18DBAD for ; Mon, 16 Dec 2024 06:00:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.739 X-Spam-Level: X-Spam-Status: No, score=-9.739 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, T_SPF_HELO_PERMERROR=0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b9EZmn8IOcdJ for ; Mon, 16 Dec 2024 06:00:53 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51BE7C1CAE70 for ; Mon, 16 Dec 2024 06:00:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=4902; q=dns/txt; s=iport; t=1734357653; x=1735567253; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=r4hLQrU2DOZtFDgfl4qQvxPZBAfXH73mL0jq/dNZ3KE=; b=SkucEfZUiP+SIZkhO3Rq/zapIWBR2Z4iojJE5So/CVu5pjLQSeyvF4KL vtauJ3KPi6mYxJMYKZxI4hRIMDufiulDvqn1YRfoC36NtCe5Ef0Zeic0b nKz2ztb/ssCpATmK+MvTfNokSFWHwA9JG66XEdqYmRY/DYd9LFp5rPrVZ c=; X-CSE-ConnectionGUID: +vdCVFSeQueB/8vgOAvQUA== X-CSE-MsgGUID: Wopqy0+GSqm+77a18WSrBQ== X-IPAS-Result: =?us-ascii?q?A0AFAAD9MGBn/5X/Ja1aGgEBAQEBAQEBAQEDAQEBARIBA?= =?us-ascii?q?QEBAgIBAQEBQCWBGgUBAQEBCwGBcVIHdoEcSIRVg0wDhE5fiHIDkUqMThSBa?= =?us-ascii?q?g8BAQENAjUPBAEBhQcCFopWAiY0CQ4BAgQBAQEBAwIDAQEBAQEBAQEBAQELA?= =?us-ascii?q?QEFAQEBAgEHBYEOE4V7DYZaAQEBAQMSEREVBSALDAQCAQgOAwQBAQECAiYCA?= =?us-ascii?q?gIuARQBCAgCBAEHBgUIFQQBgmCCZAMBpC8BgUACiit6gTKBAeAggRouAYhNA?= =?us-ascii?q?YFshBoggx2BHycbgUlEgRVCeYFvPoJhBIEpARIBCRoFECODITqCLwSCBwICA?= =?us-ascii?q?hIENC9pOIEqAYETAgICAgICAgICAgICAgKBDSVnggOBe2ECDQOBaWp1gVyBD?= =?us-ascii?q?GmBOwYpgQaDF4JdghOGVQlJexwDWSERAVUTFwsHBWRFHysDLjYxggWBWwU3R?= =?us-ascii?q?zqCEGlJNwINAjaCIiRYgk2CW4I9hGGEWIYagheBaAMDFhMtHUADC209NxQbB?= =?us-ascii?q?QQ6ewWbbQFGgmh1FVVWgRIHRwxHk2uDM680CoQaoXwXhASmTZh7IoI1oH0EB?= =?us-ascii?q?IUkAgQCBAUCDwEBBoFnPGlwcBU7gmcJSRkPkhvAT3gCATkCBwEKAQEDCZFDA?= =?us-ascii?q?QE?= IronPort-PHdr: A9a23:+tNflB+bIdnHO/9uWBDoyV9kXcBvk6//MghQ7YIolPcXNK+i5J/le kfY4KYlgFzIWNDD4ulfw6rNsq/mUHAd+5vJrn0YcZJNWhNEwcUblgAtGoiEXGXwLeXhaGoxG 8EqaQ== IronPort-Data: A9a23:LzAMhaIQKmwLfnGJFE+RlpQlxSXFcZb7ZxGr2PjKsXjdYENSgTBUy DdNXDjSM66Ca2GgLdp0Ptu/pBgGupaDz9E2TAId+CA2RRqmiyZq6fd1j6vUF3nPRiEWZBs/t 63yUvGZcoZsCCea/kr1WlTYhSEU/bmSQbbhA/LzNCl0RAt1IA8skhsLd9QR2uaEuvDnRVrX0 T/Oi5eHYgP8gWcqajt8B5+r8XuDgtyj4Fv0gXRmDRx7lAe2v2UYCpsZOZawIxPQKqFIHvS3T vr017qw+GXU5X8FUrtJRZ6iLyXm6paLVeS/oiI+t5qK23CulQRuukoPD8fwXG8M49m/c3+d/ /0W3XC4YV9B0qQhA43xWTEAe811FfUuFLMqvRFTvOTLp3AqfUcAzN0tEk0dA6Mj999qDEsJp eIXDxkTVy2q0rfeLLKTEoGAh+w5J8XteYdasXZ6wHSAV7AtQIvIROPB4towMDUY358VW62BI ZBENHw2MEWojx5nYj/7DLolkuO1hmPyaRVTqUmeouw85G27IAlZiumyaIKMJIfaLSlTtnmfv nvXpyfWOQgfd4PAwGPVzUm2rNaayEsXX6pXTtVU7MVCnFmI7m0eFBNQUkG0ycRVkWakUN5Zb khR8S00oO1rrgqgT8L2WFuzp3vsUgMgZue82tYSsWml4qHV+A2eQGMDS1Z8hBYO7afamRRCO oe1ou7U IronPort-HdrOrdr: A9a23:ujfGY6u1Foq8Z2pE30u9ct7T7skCOYAji2hC6mlwRA09TyXGrb HMoB1L73/JYWgqOU3IwerwRpVoIUmxyXZ0ibNhW4tKLzOWyVdAS7sSorcKogeQVxEWmdQtr5 uIH5IObOEYSGIK8voSgzPIXerIouP3jZxA7N22pxwCPGMaDp2IrT0JdjpzeXcGPTWucKBJb6 Z0kfA33wZIF05nCfiTNz0uZcSGjdvNk57tfB4BADAayCTmt1mVwY+/OSK1mjMFXR1y4ZpKyw X4egrCiZmLgrWe8FvxxmXT55NZlJ/K0d1YHvGBjcATN3HFlhuoTJ4JYczDgBkF5MWUrHo6mt jFpBkte+5p7WnKQ22zqRzxnyH9zTcV7WP4w1PwuwqhnSW5fkN5NyNyv/McTvLr0TtmgDi66t MM44utjesTMfoHplWl2zGHbWAzqqP+mwtTrQdatQ0tbWJZUs4RkWTal3klSqvp20nBmdsaOf grA8fG6PlMd1SGK3jfo2l02dSpGm8+BxGcXyE5y4eoOhVt7TlEJnEjtYQit2ZF8Ih4R4hP5u zCPKgtnLZSTtUOZaY4AOsaW8O4BmHEXBqJaQupUBnaPbBCP2iIp4/84b0z6u3vcJsUzIEqkJ CEVF9Dr2Y9d0/nFMXL1pxW9RLGRnm7QF3Wu4tjzok8vqe5SKvgMCWFRlxrm8y8o+8HCsmeQP q3MII+OY6UEYIvI/c/4+TTYegnFZBFarxmhj8SYSP6nv72 X-Talos-CUID: 9a23:E3/8dG7kxuuXQZJVJtsst1AYMf4LSXDk0Xr6ZB+mBkFAVoSoYArF X-Talos-MUID: 9a23:esOgXQkooTEWjA9O17pPdnpdM99x8vztJ3sUlNZZ5MDdZRNLIR2k2WE= X-IronPort-Anti-Spam-Filtered: true Received: from rcdn-l-core-12.cisco.com ([173.37.255.149]) by rcdn-iport-6.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 16 Dec 2024 14:00:52 +0000 Received: from rcdn-opgw-1.cisco.com (rcdn-opgw-1.cisco.com [72.163.7.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by rcdn-l-core-12.cisco.com (Postfix) with ESMTPS id 674E3180001D7 for ; Mon, 16 Dec 2024 14:00:52 +0000 (GMT) X-CSE-ConnectionGUID: A02N0fT2TcCU3KxMRRrwKQ== X-CSE-MsgGUID: CHHXZYtZT0qXfp8W3mToxw== Authentication-Results: rcdn-opgw-1.cisco.com; dkim=pass (signature verified) header.i=@cisco.com X-IronPort-AV: E=Sophos;i="6.12,238,1728950400"; d="scan'208";a="21734685" Received: from mail-sn1nam02lp2040.outbound.protection.outlook.com (HELO NAM02-SN1-obe.outbound.protection.outlook.com) ([104.47.57.40]) by rcdn-opgw-1.cisco.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 16 Dec 2024 14:00:52 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=GwW8bCFp+yKmJtIyge6p4cdNOnPvUJGsJaZ4qqS/pe0EemNHVy4UWOJH8M0FpmXpkU0pEx+rCRFJP8YNEHXuNgJ9MGut6bXNWchWpB9Gk9XefZnIeW7iVmXjwv9IY2skb3DGAdnO3l5tRTe9vSNM7I6I4cGGonhRDRhEBPsyNxxKR/SwiQOVfkfEVv4048jSdSaD0yh+Afe/WSg+AyR869sQdgRFmcIpYcS4xIRUE/y7TWKP2J/GtDMuwYHk0yGb80sN4bl7SccNOYdJbC3dq21/De5VSmTfdLQ85rkJgmCTtLf8yAgbg2IkYgRRQdMjyRaYPgcDjcZqKK9vrLl+Zg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=r4hLQrU2DOZtFDgfl4qQvxPZBAfXH73mL0jq/dNZ3KE=; b=hyrGukb93U8hz75j9QY/w3paHaevMzqAgJ0T3T5Nx+hU4oBWqJNOGgcpAgOOZ4+yt+FuYgt3AVB75xVfgM5+6aYfFWOolONuBXk20tnDdG7FkW6yNzPnlmUnWhG3CAqZJa8GcgTp04UGZ2bE84cxmbBJIvO7AWjGWguaBa1Z81jBI5/YzFtfhI9p/deYEA0oN3GVpeenInOhkX3VqJX3A+i5sOUNTnFOSkh0lsBEWF9pYVSTHlqzx7jqbckc26m2rA4qefkYDQOukh84DJmZQKgMUlEK+tYwR74p5joHE5p/ANsaoyT2bmWqohrDiGJn6nVWKocveqJH2KcHEn+fHg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none Received: from CH0PR11MB5444.namprd11.prod.outlook.com (2603:10b6:610:d3::13) by CYXPR11MB8753.namprd11.prod.outlook.com (2603:10b6:930:d5::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8251.21; Mon, 16 Dec 2024 14:00:50 +0000 Received: from CH0PR11MB5444.namprd11.prod.outlook.com ([fe80::5f89:ba81:ff70:bace]) by CH0PR11MB5444.namprd11.prod.outlook.com ([fe80::5f89:ba81:ff70:bace%6]) with mapi id 15.20.8251.015; Mon, 16 Dec 2024 14:00:50 +0000 From: "Scott Fluhrer (sfluhrer)" To: Alicja Kario , Christian Huitema Thread-Topic: [TLS] Re: [EXTERNAL] Disallowing reuse of ephemeral keys Thread-Index: AQHbT8Bf8m98Y1aOAkGdV07Hl01JlrLo5SUQ Date: Mon, 16 Dec 2024 14:00:50 +0000 Message-ID: References: <50935d5a-3072-4db5-ab38-244b2d97cfeb@redhat.com> In-Reply-To: <50935d5a-3072-4db5-ab38-244b2d97cfeb@redhat.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: CH0PR11MB5444:EE_|CYXPR11MB8753:EE_ x-ms-office365-filtering-correlation-id: c04d3587-fd2a-4234-37a2-08dd1dda0c7e x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|366016|4022899009|376014|1800799024|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?OWlkbXFkQmRGTTRUaXVhOUdtaHNxbWRkclFkQ1NuTVp4cm9PMENneVhpaldG?= =?utf-8?B?UVcwWi9SSk8zVVRxRXVJSERyMXFrZ1hzR1d3dEluOVFoc2pOZGRkLzB0VXZx?= =?utf-8?B?MUZRWTY4Zy9sWW50U3pzS3ZWd2lCa1ZxeXgva0o3OHdIeVlaVk54QXFad2tt?= =?utf-8?B?MnVIdTRxdnVCNFFPVHlXVWUvOVhmbFBWQlZvSG05V3Rvb2FvV1IxVTlSMGxS?= =?utf-8?B?Smpkc0dra3haK05UNkxYUko3SW5haXh4TUFXUWsrUUhLNjhtMzREQlprRFZv?= =?utf-8?B?SDhGbU4vN0E2bkl4bXRudGpqRE9iMkY1WVVVQWZ1dWZsS3FJc3Y4cWR2d3Fx?= =?utf-8?B?SG5XeW5Fb2NqbzE0bWFMU3VLYXBrcEQ4czZTc1NKWHp4eVZzd3RoeTVJb0JH?= =?utf-8?B?UlJCbFRLQkJsR25NdGMwWlNhT2JQaFdRQUtuc3NUc1plOU44Z09NUVZoVWZB?= =?utf-8?B?YzhQTFBmaW13UWF1TkJRQUZoR3NKSVRCUCtkdVRpSEdHOEFHSXZyQXhyUm54?= =?utf-8?B?anNxTVVRZk5WVFErRU5qS1p5a1pYanJ3QTMxRkQ4YjMrcWYrUzVzcmZOQUQr?= =?utf-8?B?Nk5ycTY5N3pLWDFLKzh2b3ZFd2tOWkVFdVpvTG15WWEvSUNZVlUveVExR2dV?= =?utf-8?B?T0h2VUsraHg0YUhpYUFINUdMNWVyekE5VS81bEc4TEYrSXk4MkthZWhVb1lN?= =?utf-8?B?dFd1bUwyWWRwZnhqUEJFRitabHNGcHBoY2RHTlBxOXdEb0dKanhDTVZ4M1Ew?= =?utf-8?B?N3NMem9Tb2dvK3M1Zkt0SFlMaEpvM0NqcWlRSnZURXd5Sm9LTyswQ3U4U2Jv?= =?utf-8?B?TGZtclh3SWkwMFcvQ2NZbUpDcktwRysxNk4wMjdndUdKNWsxUVFLWWZkRm5a?= =?utf-8?B?b0ppVWxDcHY0d1BFaUhCQTdEMHFWZ0FQaUFFNHQ2aC9BZU1kRXRNV1pROENT?= =?utf-8?B?NmRLQ2JsaEhETGdCU1crS0g2azhjVForQlp0dWpSNytxeFlLT0VweWZYUklm?= =?utf-8?B?MFNoS2xYZDI5bEtBTGl5YmtsQncvNThjRFB4VlQxb3lkdkIvVU8rN1N0T01j?= =?utf-8?B?STVha1pwaDlFK0g4SmQ4WktYWmdndHRMWmhXaVJkY2dqZ0dockZ3MEVlb05O?= =?utf-8?B?Vkg5VnM5UW8vc3p1bjZXSVl3OXg1WUFoMC82NUJaMWdNaURjT0NNRlM0OS9F?= =?utf-8?B?dWZPeStVV0pUZi9DOEgrSW1aT2ZLL2J4aElKRDVjdSsxNTVvM0VOTm1RYkFa?= =?utf-8?B?S0diWkoyY1ZhY1JrRjlmSk1uK0llM0MvQmFVbjBscmJ5SThmd21zL3M4M2Y4?= =?utf-8?B?RFZsaHlSc2lJaG1IVlJ6WXIzZUxEOHVmN0JQT2JYa3BDUHU2Y2oxbXQ5RkRq?= =?utf-8?B?L2txSVpTUURvaEJPakxRdHpSNS9WT1gwNzFCeXhhcUgvU1hZS2RkT1pwMUVk?= =?utf-8?B?amdQTGdPaGZPd2dWN0NyTWxXSk5yRFZ4ZkZaZ2xoREJCUncxMUk4MVdjL2V1?= =?utf-8?B?WXhqenowQkw1cXdNNjNuZlQ2a3FRcFprQ2N4Ny94NlA2UjJpR2pyN2xNZURI?= =?utf-8?B?RzVxd0svdTVHcmpGQ05CeE16S3RNVDk0QWF4QmVRVStNaVYya2lGV0t3Qmps?= =?utf-8?B?YWE3ajgvV3BKWWQrbWpXdVJmaW5EK3QvYSthQm4rTmUvbzkwNk5QeWdxU0ZE?= =?utf-8?B?Y1J1M01Qd2U0Z2c3TXhHRy9BcGt0OWRDdHRoYlYzVm9TQjlBR29rNGRYeUdK?= =?utf-8?B?Z0R0VzNTclNXVk1BTzBRQXJ6U2FTZlkrVmlrbHdCNnp3THBJOUNQNWtlZ0JJ?= =?utf-8?B?bXBjT3V4WXdjM3JEdng3S2dYZWRiNmpaakNUdmxEYkI4NUcyMS9uOWR4Q24v?= =?utf-8?Q?bBLPNwMW5pHPL?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CH0PR11MB5444.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(4022899009)(376014)(1800799024)(38070700018);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?WE8wNGVVLzlDYVQzZUhDeWFYUHUvbkk4Q0l1NXBBYVJQRFl2alZmWXV6d3hx?= =?utf-8?B?WXk5SWN1b0dMNnhNMVRPZ2tzWG1lRmpUWjU0Y1UrWXEzRjZoTHFFVytMVWQz?= =?utf-8?B?dTdFc0RyMUtpZE1TdWIwT3JRWUpBNmFUZUlGdFpSbmdkZCtYSmxLd2RKcmJq?= =?utf-8?B?blVsTVRQbkgrTVV4LytlOUFTa2dwcVNQUGFCZGUrdnphTmo4bitMVlQ3N3VN?= =?utf-8?B?eGhkckk4WFNBY3VMeXFZRFBHbDNndU1RU25QYytWYzlNamtKc2FubW9nT0ZX?= =?utf-8?B?MjZDcnZiS3laemtIcGE4T0VJZWF2M1NXZG1jZkdiN2FKM3Bsd1dFY21KcGFj?= =?utf-8?B?dzc1V3laNHZvdEFKak9ZS3V5S1VNdHM1L1liRVd1b3dCMnZXTUhwV24vZWN3?= =?utf-8?B?Q09qTnpWbDRTWmQ0Z2Ryd1NpTVo5NHcrS3draEpWZjEvZEdVMHNrMTRsUWQx?= =?utf-8?B?bW01QkQvbTVoMUJNL0c3ZFBDajlxdVpKWDMxZE9CTEYyU0pQZzRqZFJTYlho?= =?utf-8?B?Qks1NE8rVndJdmo3WUhwWjFITVo5YmluL2lreGlJSkc2UCtscDhETzBta0tL?= =?utf-8?B?U0QrczdlVFBXU2pBY0JNRVVZbTduTHluN3Btc3dnVm9RTTJxa21WeTRYS1E2?= =?utf-8?B?ZFVzS3hlNnREaW1JQ0dDcmx0M2ROYkNOL2lkd1lYZUR2bnZGbzA2MW5tY1pK?= =?utf-8?B?Z1FpVXVoWjUyeDhMZjAzSEI1ZGV3eWlGTlRhVmRDMVkvVkg5UFdkcnRRVzdD?= =?utf-8?B?Z3ZPOGdrNmx3SC9rUVl5Zzg1a3gyTnprbndaOFdheUdYZVl4VFEzd0l1aGpt?= =?utf-8?B?ZXpESzdnRGNNUUtrSWNrV3lNR29xa21RTGxrZlhmZXBHR3ZoR1o0dFczNWlF?= =?utf-8?B?aWk1S2loaG9BcWllV25HYWZZZzd2NHdJbUJvOVV3S2NjTkl6L1JITTg5ZXdH?= =?utf-8?B?N25NSG51M2dUOWY3ZE5ZVGdPeXYvRXNZQmdCUExBQjVTYi96dkpkMzhOa041?= =?utf-8?B?aUlyWGJkRGN1WTlZOHZKeExmdjVNN2YrNHFNUHFqN3YyRFhiZ0hKWFhwc05i?= =?utf-8?B?RDEvVXg2NjYzMkV6R1FLSCs4djlvTmsxeldta0ZLVzM0U2RUSE9GbWw5M0U3?= =?utf-8?B?VWgvMEw1NURER0x1b0Z6N0ZLbm5jc2RzRSs0N1JrYlBLRS92dUF2U0U2SFJF?= =?utf-8?B?TFd1NnhlOXVZM1lob3ROWWdIZTgxZGk2aE1YamdXVVorTmdrdXJFZW1oSnBJ?= =?utf-8?B?czQzZ2xCNldhRWJWT1RPSVdNQjFGYUZjTWtMUVlZYmRaMDltc2R2czlxWE1w?= =?utf-8?B?MVZsUWNFdzUwNGtrRFk4clpWMTJCRU0yTnk5OGVkSjBmTm51cnlrY0FoZEdZ?= =?utf-8?B?Q2VsTjFQQVQyR0h1cnFjSWRISGdkTExvUDJ2NW9PUUtHT3RWUEdLTDNycHYw?= =?utf-8?B?MFVEUkJVRHV2UmhDVnVzdXl3RjdzRFpyb3V6ODE1ZHQrcEJYcmR2cldEWDdM?= =?utf-8?B?dEJzWUl5MG1tM3d4MU5aQUU5bTlPRm5oWTFPZ0dud2Nxait3YVNpT1V6dldS?= =?utf-8?B?c0l1OWNyOStuT3ZqS3I3dk1PRXZTeko0UXZtRUNjTUFweFFOb3h1aWh3VEZY?= =?utf-8?B?VlFldHdBMFF0eFRrS3VpejE1amRBWTd2dUJYTG8rS3RMQkx1SnVTVWd6a1Jk?= =?utf-8?B?TjROS3I0enI5elRnUWpjM090Y2ZDMGVQTnBiaFdtaE5VK0RveWxkVnkySld3?= =?utf-8?B?M1pHWEFLdVVKN3BnRWJ2eWNydldrWkRYOTltV2xIVUQ3TE8xa2VTNE1SMXk1?= =?utf-8?B?WHh3OWo5S3RUcHdZWUtLUFU3MzFKeE9GVkIzVllwemJqQVZXbGVmSmRuMGI4?= =?utf-8?B?bUFTa1VlMTZSTDhCNTJBMTdOem53TXZzNXBmVVpaSTJjUHQ4QlZhTENRKzBF?= =?utf-8?B?dmJGemxKUTMyZmlpZnZ0TTRORjZKRWFrdEFQbnNjbEorWXJnUVdNbE5mbGEx?= =?utf-8?B?RWZzS28wUXNhSVpueFJDSHJDZm03cUtQRDc5MGwvWFJsUkMvRkF2U0ZQVDgz?= =?utf-8?B?b21MU1JkZmIya0lPM3dYOCt2dE5XUnBJdEFpcjA3SE9kMVpScHlNanQzVkcy?= =?utf-8?Q?5IxY=3D?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: cisco.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CH0PR11MB5444.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c04d3587-fd2a-4234-37a2-08dd1dda0c7e X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Dec 2024 14:00:50.6114 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: SD7CyIiSMO8swZ+a+JQmAXKxaCoXGgko1OA3XSEJDz+vMEnrweQhP3SzXjzL6YragfLi/+mOyIS8cxPC246kFA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CYXPR11MB8753 X-Outbound-SMTP-Client: 72.163.7.162, rcdn-opgw-1.cisco.com X-Outbound-Node: rcdn-l-core-12.cisco.com Message-ID-Hash: MBY7HDR4HYOOCCKEBBHJYCJUUQIBDWH4 X-Message-ID-Hash: MBY7HDR4HYOOCCKEBBHJYCJUUQIBDWH4 X-MailFrom: sfluhrer@cisco.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Andrei Popov , IETF TLS X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BTLS=5D_Re=3A_=5BEXTERNAL=5D_Disallowing_reuse_of_ephemeral_keys?= List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: TWlnaHQgSSByZW1pbmQgcGVvcGxlIHRoZSBNTC1LRU0gcHVibGljIGtleSByZXVzZSBpcyBkZXRl Y3RhYmxlPw0KDQpUaGUgTUwtS0VNIHB1YmxpYyBrZXkgaXMgaW4gdGhlIGNsaWVudCBoZWxsbywg d2hpY2ggaXMgZWl0aGVyIGluIHRoZSBjbGVhciwgb3IgKGluIHRoZSBjYXNlIG9mIEVDSCkgaXMg cmVhZGFibGUgYnkgdGhlIHNlcnZlci4gIEhlbmNlLCBpZiB0aGUgc2FtZSBNTC1LRU0gaXMgcmV1 c2VkLCB0aGVuIChpbiB0aGUgd29yc2UgY2FzZSkgdGhlIHNlcnZlciBjYW4gZGV0ZWN0IHRoYXQu DQoNCkFuZCwgaWYgaXQgaXMgZXh0ZXJuYWxseSB2aXNpYmxlLCBJIGJlbGlldmUgdGhhdCB0aGUg VExTIFdHIGNhbiBmb3JiaWQgaXQuICBXaGV0aGVyIGl0IHNob3VsZCBvciBub3QgaXMgd2hhdCB3 ZSBhcmUgZGViYXRpbmcsIGJ1dCBJIGJlbGlldmUgdGhlIGRlYmF0ZSBjYW4ndCBiZSBjbG9zZWQg b24gdGhhdCBiYXNpcy4NCg0KSGFzIGFueW9uZSBjb25zaWRlcmVkIHRoZSBvcGVuIHF1ZXN0aW9u cyBJIGdhdmUgYSBmZXcgZGF5cyBhZ28/DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gRnJvbTogQWxpY2phIEthcmlvIDxoa2FyaW9AcmVkaGF0LmNvbT4NCj4gU2VudDogTW9uZGF5 LCBEZWNlbWJlciAxNiwgMjAyNCA4OjQyIEFNDQo+IFRvOiBDaHJpc3RpYW4gSHVpdGVtYSA8aHVp dGVtYUBodWl0ZW1hLm5ldD4NCj4gQ2M6IEFuZHJlaSBQb3BvdiA8QW5kcmVpLlBvcG92PTQwbWlj cm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz47IElFVEYgVExTDQo+IDx0bHNAaWV0Zi5vcmc+DQo+ IFN1YmplY3Q6IFtUTFNdIFJlOiBbRVhURVJOQUxdIERpc2FsbG93aW5nIHJldXNlIG9mIGVwaGVt ZXJhbCBrZXlzDQo+IA0KPiBObywgdGhlIHNwZWNpZmljYXRpb24gZGVmaW5pdGVseSBjYW4sIGFu ZCBzaG91bGQsIHNwZWNpZnkgYmVoYXZpb3VycyB0aGF0IGFyZQ0KPiB1bmVuZm9yY2FibGUuDQo+ IA0KPiBXaGVuIHRoZXJlIGFyZSBwcmVmZXJyZWQgb3IgcmVjb21tZW5kZWQgd2F5cyBvZiBkb2lu ZyBzb21ldGhpbmcsIHdlDQo+IHNob3VsZCBhYnNvbHV0ZWx5IHB1dCB0aGF0IGluIHdyaXRpbmcu DQo+IA0KPiBPbiBUaHVyc2RheSwgMTIgRGVjZW1iZXIgMjAyNCAyMTowNzowMyBDRVQsIENocmlz dGlhbiBIdWl0ZW1hIHdyb3RlOg0KPiA+IEkgbGlrZSBrZWVwaW5nIGFzIHRoZXkgYXJlLiBEaXNh bGxvd2luZyBvbmx5IG1ha2VzIHNlbnNlIGlmIHRoYXQNCj4gPiBwcm9oaWJpdGlvbiBjYW4gYmUg ZW5mb3JjZWQsIGFuZCBvbmUgb2YgdGhlIHBlZXIgcmVmdXNlcyB0aGUNCj4gPiBjb25uZWN0aW9u IGlmIGl0IGRldGVjdHMga2V5IHJldXNlLiBXb3VsZCB3ZSB3YW50IHRvIGRvIHRoYXQ/IEFuZCwN Cj4gPiBldmVuIGlmIHdlIHdhbnRlZCB0byBhY2NlcHQgdGhlIGNvc3Qgb2YgcmVmdXNpbmcgY29u bmVjdGlvbnMsIGNvdWxkDQo+ID4gaW5kaXZpZHVhbCBub2RlcyBhY3R1YWxseSBkZXRlY3QgcmV1 c2UgYnkgYSBwZWVyPw0KPiA+DQo+ID4gLS0gQ2hyaXN0aWFuIEh1aXRlbWENCj4gPg0KPiA+IE9u IERlYyAxMiwgMjAyNCwgYXQgMTA6MTHigK9BTSwgQW5kcmVpIFBvcG92DQo+ID4gPEFuZHJlaS5Q b3Bvdj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc+IHdyb3RlOg0KPiA+DQo+ID4gDQo+ ID4gKzEgaW4gZmF2b3Igb2Ygb3B0aW9uMS4NCj4gPg0KPiA+IENoZWVycywNCj4gPg0KPiA+IEFu ZHJlaQ0KPiA+DQo+ID4gRnJvbTogUnVzcyBIb3VzbGV5IDxob3VzbGV5QHZpZ2lsc2VjLmNvbT4N Cj4gPiBTZW50OiBUaHVyc2RheSwgRGVjZW1iZXIgMTIsIDIwMjQgOTo0MyBBTQ0KPiA+IFRvOiBK b2UgU2Fsb3dleSA8am9lQHNhbG93ZXkubmV0Pg0KPiA+IENjOiBJRVRGIFRMUyA8dGxzQGlldGYu b3JnPg0KPiA+IFN1YmplY3Q6IFtFWFRFUk5BTF0gW1RMU10gUmU6IERpc2FsbG93aW5nIHJldXNl IG9mIGVwaGVtZXJhbCBrZXlzDQo+ID4NCj4gPiBJIHByZWZlciBvcHRpb24gMS4NCj4gPg0KPiA+ IFJ1c3MNCj4gPg0KPiA+DQo+ID4gT24gRGVjIDEyLCAyMDI0LCBhdCAxMjozNeKAr1BNLCBKb3Nl cGggU2Fsb3dleSA8am9lQHNhbG93ZXkubmV0PiB3cm90ZToNCj4gPg0KPiA+IEN1cnJlbnRseSBS RkMgODQ0NiAoYW5kIFJGQzg0NDZiaXMpIGRvIG5vdCBmb3JiaWQgdGhlIHJldXNlIG9mDQo+ID4g ZXBoZW1lcmFsIGtleXMuICBUaGlzIHdhcyB0aGUgY29uc2Vuc3VzIG9mIHRoZSB3b3JraW5nIGdy b3VwIGR1cmluZw0KPiA+IHRoZSBkZXZlbG9wbWVudCBvZiBUTFMgMS4zLiAgVGhlcmUgaGFzIGJl ZW4gbW9yZSByZWNlbnQgZGlzY3Vzc2lvbiBvbg0KPiA+IHRoZSBsaXN0IHRvIGZvcmJpZCByZXVz ZSBmb3IgTUwtS0VNL2h5YnJpZCBrZXkgZXhjaGFuZ2UuICBUaGVyZSBhcmUNCj4gPiBzZXZlcmFs IHBvc3NpYmxlIG9wdGlvbnMgaGVyZToNCj4gPg0KPiA+IEtlZXAgdGhpbmdzIGFzIHRoZXkgYXJl IChpZS4gc2F5IG5vdGhpbmcsIGFzIHdhcyBkb25lIGluIHByZXZpb3VzIFRMUw0KPiA+IHZlcnNp b25zLCB0byBmb3JiaWQgdGhlIHJldXNlIG9mIGVwaGVtZXJhbCBrZXlzKSAtIHRoaXMgaXMgdGhl IGRlZmF1bHQNCj4gPiBhY3Rpb24gaWYgdGhlcmUgaXMgbm8gY29uc2Vuc3VzIERpc2FsbG93IHJl dXNlIGZvciBzcGVjaWZpYw0KPiA+IGNpcGhlcnN1aXRlcy4gIEl0IGRvZXNu4oCZdCBhcHBlYXIg dGhhdCB0aGVyZSBpcyBhbnkgcmVhbCBkaWZmZXJlbmNlIGluDQo+ID4gdGhpcyBtYXR0ZXIgYmV0 d2VlbiBNTEtFTS9oeWJyaWRzIGFuZCBFQ0RIIGhlcmUgZXhjZXB0IHRoYXQgdGhlcmUgYXJlDQo+ ID4gbWFueSBtb3JlIEVDREggaW1wbGVtZW50YXRpb25zIChzb21lIG9mIHdoaWNoIG1heSByZXVz ZSBhIGtleXNoYXJlKQ0KPiA+IFVwZGF0ZSA4NDQ2IHRvIGRpc2FsbG93IHJldXNlIG9mIGVwaGVt ZXJhbCBrZXlzaGFyZXMgaW4gZ2VuZXJhbC4gIFRoaXMNCj4gPiBjb3VsZCBiZSBkb25lIGJ5IHJl dmlzaW5nIFJGQyA4NDQ2YmlzIG9yIHdpdGggYSBzZXBhcmF0ZSBkb2N1bWVudCB0aGF0DQo+ID4g dXBkYXRlcyBSRkMgODQ0Ni9iaXMNCj4gPg0KPiA+IFdlIHdvdWxkIGxpa2UgdG8ga25vdyBpZiB0 aGVyZSBhcmUgZm9sa3Mgd2hvIHRoaW5rIHRoZSByZXVzZSBvZg0KPiA+IGtleXNoYXJlcyBpcyBp bXBvcnRhbnQgZm9yIEhUVFAgb3Igbm9uLUhUVFAgdXNlIGNhc2VzLg0KPiA+DQo+ID4NCj4gPiBU aGFua3MsDQo+ID4NCj4gPg0KPiA+IEpvZSwgRGVpcmRyZSBhbmQgU2Vhbg0KPiA+DQo+IA0KPiAt LQ0KPiBSZWdhcmRzLA0KPiBBbGljamEgKG5lZSBIdWJlcnQpIEthcmlvDQo+IFByaW5jaXBhbCBR dWFsaXR5IEVuZ2luZWVyLCBSSEVMIENyeXB0byB0ZWFtDQo+IFdlYjogd3d3LmN6LnJlZGhhdC5j b20NCj4gUmVkIEhhdCBDemVjaCBzLnIuby4sIFB1cmt5xYhvdmEgMTE1LCA2MTIgMDAsIEJybm8s IEN6ZWNoIFJlcHVibGljDQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KPiBUTFMgbWFpbGluZyBsaXN0IC0tIHRsc0BpZXRmLm9yZw0KPiBUbyB1 bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRvIHRscy1sZWF2ZUBpZXRmLm9yZw0K