Re: [TLS] What would make TLS cryptographically better for TLS 1.3

[Nikos Mavrogiannopoulos <[e-mail]>]

On 11/01/2013 12:09 AM, Nico Williams wrote:
> 
> My list:
> 
>  - It should be deployable, that's first; in particular, it needs to be
>    deployable with ECDH PFS key exchanges.

(unrelated) It would actually be nice to have a wiki for anyone to add
his wish list there.


>  - Renegotiation should be replaced with an NPN-like extension that
>    provides privacy to the TLS client principal name.

I don't think anyone can avoid renegotiation. Since the TLS packet
counters are 64-bit (and more importantly in DTLS 48-bits), one cannot
avoid renegotiation to reset the counters.

(nevertheless, all the practical VPNs I've seen using TLS, don't use
renegotiation, they just re-establish the session).

regards,
Nikos