Re: [TLS] WGLC for draft-ietf-tls-ticketrequests

[Viktor Dukhovni <[e-mail]>]

> On Jan 31, 2020, at 8:53 PM, Tommy Pauly <tpauly=[e-mail]> wrote:
> 
> Thus, the working group can progress with the tightly-scoped document that it has consensus on, and leave other use cases to future documents.

Such a deferral may be desirable and viable in cases where the
features are sufficiently orthogonal.  But here the extension
specifies the number of requested tickets, and so any separate
document would have to change the semantics of this extension
in order to get conditional issuance of tickets.

It makes no sense to split the negotiation of the ticket number
over multiple documents.  The added use-case is effectively
*free* to ignore by implementations that never want reuse,
just treat zero as 1, and be done.

If this were a major burdensome feature, I'd be sympathetic to
your desire to carve it out to a separate discussion.  But here,
I'm pretty consensus will be reached soon after we stop focusing
on the legitimacy or timing of the proposal and focus on its
substance in a final wrap-up consensus call.

I may end up in the rough, but let's at least see where the chips
fall.

The security considerations can continue to discourage reuse where
traffic analysis is a concern.  It is NOT a concern in MTA-to-MTA
traffic.  If my proposal moves forward, I'll gladly contribute
some text to the security considerations discouraging wanton
application of ticket reuse.  It should be enabled only where
appropriate.

Note that I'd like to use this extension to conditionally enable
non-reuse where presently re-use is unconditional.  Otherwise,
Postfix will just always go with reuse.

-- 
	Viktor.