IETF Logo Mail Archive

[TLS] Fwd: New Version Notification for draft-dt-tls-external-psk-guidance-00.txt

Christopher Wood <caw@heapingbits.net> Mon, 09 March 2020 19:19 UTC

Return-Path: <caw@heapingbits.net>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BEE13A155F for <tls@ietfa.amsl.com>; Mon, 9 Mar 2020 12:19:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=heapingbits.net header.b=TELf7VDk; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=nGuLfcBW
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d_emK6Wh0JLB for <tls@ietfa.amsl.com>; Mon, 9 Mar 2020 12:19:27 -0700 (PDT)
Received: from wout3-smtp.messagingengine.com (wout3-smtp.messagingengine.com [64.147.123.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D1E43A15CF for <TLS@ietf.org>; Mon, 9 Mar 2020 12:19:27 -0700 (PDT)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.west.internal (Postfix) with ESMTP id 002414FE for <TLS@ietf.org>; Mon, 9 Mar 2020 15:19:24 -0400 (EDT)
Received: from imap4 ([10.202.2.54]) by compute1.internal (MEProxy); Mon, 09 Mar 2020 15:19:25 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=heapingbits.net; h=mime-version:message-id:date:from:to:subject:content-type; s= fm3; bh=QKCPXmGe47MRJZa474tdc9UfoxpBBzvOae72ai73l+k=; b=TELf7VDk xU9WyWsNVYKjsa08fJwkIbzvWsXh842Wxt59mpDtzeXUmrIVA2zN67FAeDc97qCk Zzgr+KRNyXVQWydDbod4A4ZyxFxYaaPGXoqmIaG242qW833mpkmONomj3u8oZ2ZQ dpyTLZ6cvVIJm3iQkFNjij2PX4/vi/h38PT/7IYc+vtpPxKguM3SfHKCLxJXur1S 0wfjIUsVipdLvefJNSpKxeHEv5bpQhwFp1BXg//cQdp8UO9lKdM5RqpXqAykZmUu YS3j8TABd4yi6htddsbQJZocjA4/nDVOMx/P1xRuZe0rACyZrnOCBYzjyNsn4xw3 34OK+yNezNiCVA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; bh=QKCPXmGe47MRJZa474tdc9UfoxpBB zvOae72ai73l+k=; b=nGuLfcBWU1SIsAdmuZ0r9mddzCzPH989Oo+V2M2rYIB4L B2vbvnGzl5P/EPlCypAkFcvg7t6/HAHq0OO5XeS2HVocNY8p/eEwdu+YlyqwQ8oD RIJv3WU8mJ86fKMvxTuO2kxpmHyDrdLJ8nVac8wQUDcod9u+XBgMpq5IRlKYP0Jj 4Ech0QdKHJOewK5gk2FAJ1SOGO5zU3/PV9hgYiYFtdFmhzMTdL5va8kFBjvLWjeG QvN5tQltvlbL9LYVa4FSQyqrP8kgFgFLA60p7+mVKJIlovYmyaDfD3bFWctoPyj5 KREWTr2A4CtOr0h7n+v7cmvJdhola2IkMy0r4TWEQ==
X-ME-Sender: <xms:vJZmXgIAIC8ul5FRBa-XN5kfrHncPTUpIh4PR4NIBnSOFv7OFjlBIA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedugedruddukedguddvgecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkfffhvffutgesthdtre dtreerjeenucfhrhhomhepfdevhhhrihhsthhophhhvghrucghohhougdfuceotggrfies hhgvrghpihhnghgsihhtshdrnhgvtheqnecuffhomhgrihhnpehgihhthhhusgdrtghomh dpihgvthhfrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghi lhhfrhhomheptggrfieshhgvrghpihhnghgsihhtshdrnhgvth
X-ME-Proxy: <xmx:vJZmXub87WXbnyqoQl3nu82h2KzVP1u0AqGEOgUhU8kUP9vTThYedg> <xmx:vJZmXp1JXG4lU8ZYyfDBluQLUJUJEhu-ZqI_KEvol42wEQeWvCpXYw> <xmx:vJZmXumPv3eYZSOUZxrFgqJKT30zFzP_dfdbmaBQxn59QRzumPwvJA> <xmx:vJZmXuiEh9snXHeXX2d-_sUnvj5nH-S1birLVtqStUbKtgb84wnoew>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 3C0FD3C00A1; Mon, 9 Mar 2020 15:19:24 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.7-991-g5a577d3-fmstable-20200305v3
Mime-Version: 1.0
x-forwarded-message-id: <158378101111.5446.17619154843504007763@ietfa.amsl.com>
Message-Id: <1df3aa66-f3c9-41e4-8bd1-e304566ffe71@www.fastmail.com>
Date: Mon, 09 Mar 2020 12:17:06 -0700
From: Christopher Wood <caw@heapingbits.net>
To: "TLS@ietf.org" <TLS@ietf.org>
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/58Csi3uU1x7o0FJ_71vbrvnAKHI>
Subject: [TLS] Fwd: New Version Notification for draft-dt-tls-external-psk-guidance-00.txt
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Mar 2020 19:19:37 -0000

This document is the first checkpoint for the External PSK design team started a few weeks back. Feedback in the form of comments, edits, or PRs [1] is welcome!

Thanks,
Chris (no hat)

[1] https://github.com/tlswg/external-psk-design-team

----- Original message -----
From: internet-drafts@ietf.org
To: "Christopher A. Wood" <caw@heapingbits.net>, Mohit Sethi <mohit@piuha.net>, Jonathan Hoyland <jonathan.hoyland@gmail.com>, Christopher Wood <caw@heapingbits.net>, Russ Housley <housley@vigilsec.com>
Subject: New Version Notification for draft-dt-tls-external-psk-guidance-00.txt
Date: Monday, March 09, 2020 12:10 PM

A new version of I-D, draft-dt-tls-external-psk-guidance-00.txt
has been successfully submitted by Christopher A. Wood and posted to the
IETF repository.

Name:		draft-dt-tls-external-psk-guidance
Revision:	00
Title:		Guidance for External PSK Usage in TLS
Document date:	2020-03-09
Group:		Individual Submission
Pages:		11
URL:            https://www.ietf.org/internet-drafts/draft-dt-tls-external-psk-guidance-00.txt
Status:         https://datatracker.ietf.org/doc/draft-dt-tls-external-psk-guidance/
Htmlized:       https://tools.ietf.org/html/draft-dt-tls-external-psk-guidance-00
Htmlized:       https://datatracker.ietf.org/doc/html/draft-dt-tls-external-psk-guidance


Abstract:
   This document provides usage guidance for external Pre-Shared Keys
   (PSKs) in TLS.  It lists TLS security properties provided by PSKs
   under certain assumptions and demonstrates how violations of these
   assumptions lead to attacks.  This document also discusses PSK use
   cases, provisioning processes, and TLS stack implementation support
   in the context of these assumptions.  It provides advice for
   applications in various use cases to help meet these assumptions.

                                                                                  


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

v2.23.0 | Report a Bug | By Email