Re: [TLS] DSA should die

[Viktor Dukhovni <[e-mail]>]

On Thu, Apr 02, 2015 at 01:40:40AM +0100, Stephen Farrell wrote:

> <no-hats-except-the-330+-ciphersuites-is-crap-hat>
> 
> Here's a suggestion: why pick 'em off one by one? How about
> creating a new registry that only includes stuff we think is
> really good for TLS1.3?
> 
> Personally, I'd go further and argue that the new registry
> only specify the TLS 1.3 MTIs, but that's a different question:-)

The problem is that leaves SRP and the like out in the cold.  So
there would need to be few such lists, but that's fine, a client
doing SRP/PSS/... would only advertise SRP/PSS-capable cipher-suites,
and client with no SRP/PSS/... shared secrets would not advertise
any of them.

So that means a short list per authentication trust-model.

    * A list for PKI TLS.

    * A list for anon TLS (that includes the PKI list, for
      interop, and the client will ignore the server's cert).

    * A list for SRP.

    * A list for PSS.

Each list is short, and any client uses just one list.

-- 
	Viktor.