Re: [TLS] Draft Agenda for TLS Interim meeting

[Eric Rescorla <[e-mail]>]

On Sun, May 4, 2014 at 6:08 PM, Watson Ladd <[e-mail]> wrote:

> On Thu, May 1, 2014 at 11:29 AM, Joseph Salowey (jsalowey)
> <[e-mail]> wrote:
> > Draft agenda is posted at
> http://www.ietf.org/proceedings/interim/2014/05/15/tls/agenda/agenda-interim-2014-tls-1and copied below:
> >
> > TLS Working Group Interim Meeting
> > Dates/Times:
> > 15 May 2014 (9:00 am - 5:00 pm MDT)
> > 16 May 2014 (9:00 am - 2:00 pm MDT)
> > Location:
> > 1899 Wynkoop Street, Suite 600, Denver, CO, USA
> >
> >
> > Day 1
> > -----------------
> > 9:00. Get Settled, Administrivia, Agenda (30 min)
> > 9:30 - 10:30  Fixing Session Resumption (Triple Handshake) (60 Min)
> > 10:30 - 12:30 Encrypt SNI or not (120 min)
> > 12:30 - 1:30 Lunch
> > 1:30 - 2:00  Wrap up SNI discussion
> > 2:00 - 3:00  Client Puzzles
> > 3:00 - 5:00  Discuss Handshake Flows
> >
> > Day 2
> > --------------
> > 9:00 Arrival
> > 9:30 - 12:30 Discuss Handshake Flows
> > 12:30 - 1:00  Wrap up Handshake discussion
> > 1:00 - 2:00  Summary and next steps
>
> So I unfortunately won't be at the meeting. I do wonder about the
> scope: are Session Resumption fixes and Client Puzzles for TLS 1.2 and
> prior, or only TLS 1.3?


The intention is to discuss Session Resumption fixes in the context of
TLS <1.3 as well, since presumably we want people to have security
against triple handshake attacks even if they don't want to upgrade to
the latest version of TLS (no matter how advisable that might otherwise
be.)

Since it's not clear we're going to do client puzzles at all I think it's
probably premature to say which version we might or might not do them
in.

-Ekr