Re: [TLS] Working Group Last Call for draft-ietf-tls-tls13-18

[Benjamin Kaduk <[e-mail]>]

On 11/09/2016 11:42 AM, Martin Rex wrote:
> Nobody so far has provide a single example of *REAL* value.
> For the hiding of ContentType to provide real value, the prerequisites are:
>
>   (1) this value will be _unconditionally_ provided in TLSv1.3
>
>   (2) this value can be demonstrated to be a real security issue in TLSv1.2,
>       for existing usage scenarios, where hiding of ContentType is not
>       available
>
> Anyhing less is no value, just an illusion of value.

Thanks for clarifying your position.  I don't think many of the other
people in the thread are using the same definition of "value", which has
led to a lot of confusion.

However, I'm not convinced that the concrete benefit needs to be
mandatory-to-use in TLS 1.3 to be considered to provide value.  For
example, I personally value having the option to have my car's air
conditioning unit cool the interior temperature, but I wouldn't want it
to be the only way to cool the interior -- the rush of wind through the
windows is a different experience.  That is, having an option can in
itself provide value to some people in some situations.

-Ben