Re: [TLS] I-D Action: draft-ietf-tls-negotiated-ff-dhe-02.txt

[Viktor Dukhovni <[e-mail]>]

On Mon, Oct 27, 2014 at 02:20:43PM -0400, Daniel Kahn Gillmor wrote:

> I see three ways to achieve this goal:
> 
>  0) reintroduce an explicit (contentless) ClientHello extension that
>     means "i understand FFDHE named groups"
> 
>  1) allocate a single codepoint in the named groups registry that means
>     "i understand FFDHE named groups" but is not a negotiable group
> 
>  2) carve out a range of codepoints in the named groups registry that
>     will be used only for FFDHE named groups (and no other codepoints in
>     that registry will have FFDHE).  This way, servers can recognize a
>     named FFDHE group, even if they don't know what it is.

For completeness:

   3)  Like 0), but not contentless.  The extension lists the
       supported FFDHE groups.  The existing supported curves
       extension continues to only signal elliptic curves.

[ Perhaps I missed the discussion where this was already suggested and
  ruled out.  Sorry about that... ]

-- 
	Viktor.