Re: [TLS] security levels for TLS

At Fri, 12 Oct 2007 17:42:22 -0700,
Mike wrote:
> > - It encourages an inappropriate focus on key size. As I said already,
> >   There's a lot more to security than key size.
> 
> But key size -is- a big part of it, and you should be able to tell
> a server what key sizes you want, rather than leave it up to chance.

Yes, you keep saying that, but you haven't convinced me.

> Let me express this in a different way:
> 
> Imagine if TLS already had the ability for a client to specify key
> sizes to the server, and I was arguing to get rid of that.  Wouldn't
> you think I was crazy for suggesting it?

Yes, because it would be an unnecessary change, exactly like
the one you propose is. We're not designing in a vacuum, we've
got an existing protocol that works well. That means that
every proposed change requires justification. I don't think
you've met that bar.

> > - It's yet another way to have interop problems.
> 
> Isn't every addition?

Yes. Which is why every addition needs to be justified.

-Ekr

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls