Re: [TLS] Does anyone still want dh_rsa and dh_dss?

[Michael StJohns <[e-mail]>]

On 6/26/2014 12:14 PM, Eric Rescorla wrote:
> We've already removed static RSA for TLS 1.3 but we didn't
> emove dh_rsa and dh_dss (as opposed to dhe_rsa and
> dhe_dss). It seems like the arguments for removing static
> RSA apply even more strongly here.
>
> Is there any reason to retain these in TLS 1.3?

Would it be more appropriate to ask this in  a more crypto-neutral 
manner?    E.g. We've removed Public Key Transport as a valid mechanism 
for pre-master setup.  So instead maybe ask this as "Should we remove 
all non-ephemeral key agreement mechanisms?"

Or is there some reason to retain non-ephemeral ECDH vice non-ephemeral DH?

Mike


>
> -Ekr
>
>
>
> _______________________________________________
> TLS mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/tls