IETF Logo Mail Archive

Re: [TLS] Questions about ALPN

Michael D'Errico <mike-list@pobox.com> Tue, 15 April 2014 18:58 UTC

Return-Path: <mike-list@pobox.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6AA621A03D7 for <tls@ietfa.amsl.com>; Tue, 15 Apr 2014 11:58:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.273
X-Spam-Level:
X-Spam-Status: No, score=-2.273 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.272, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vLMZZhdSXIs6 for <tls@ietfa.amsl.com>; Tue, 15 Apr 2014 11:58:38 -0700 (PDT)
Received: from sasl.smtp.pobox.com (a-pb-sasl-quonix.pobox.com [208.72.237.25]) by ietfa.amsl.com (Postfix) with ESMTP id CF1F21A0322 for <tls@ietf.org>; Tue, 15 Apr 2014 11:58:37 -0700 (PDT)
Received: from sasl.smtp.pobox.com (unknown [127.0.0.1]) by a-pb-sasl-quonix.pobox.com (Postfix) with ESMTP id 48D8A11864; Tue, 15 Apr 2014 14:58:34 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=pobox.com; h=message-id :date:from:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; s=sasl; bh=Th3udBa03BRc 4fBU6VDTyRRPDKo=; b=LijjLDMiJCzsfI9rcwgOJYirgL/omN9F7V5A+4KHabyz FANjxjKqv3hjsGKYiFxI6y655vsPZEMsIUvVgDZOhNtlFe27eWh5i+xDJoCjsgAu DNTup1rUVE6QtgFiKoKpwI+hkGsLLlwDDGPr0hQoM//1v5vtO4WVewPiwlhACU8=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=pobox.com; h=message-id:date :from:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; q=dns; s=sasl; b=TM4j/r BdO1gLz2K1ZpxDoI0XySpefgXt+FdVOUvIkYAYV/Dd6tseZLhjEe3H72D88u1YEz u1H4pYk/DwgGs3m9XymAzV99J5WTbpZZr6oMBWGRTydrWjIwng7qmaFTqCXmcVny Xaisfgds0mku+JG/S1qa30HAXCOFPrdid08Vw=
Received: from a-pb-sasl-quonix.pobox.com (unknown [127.0.0.1]) by a-pb-sasl-quonix.pobox.com (Postfix) with ESMTP id 3DEA711863; Tue, 15 Apr 2014 14:58:34 -0400 (EDT)
Received: from iMac.local (unknown [24.234.153.62]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by a-pb-sasl-quonix.pobox.com (Postfix) with ESMTPSA id 947DF11862; Tue, 15 Apr 2014 14:58:32 -0400 (EDT)
Message-ID: <534D8157.5070200@pobox.com>
Date: Tue, 15 Apr 2014 11:58:31 -0700
From: Michael D'Errico <mike-list@pobox.com>
User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228)
MIME-Version: 1.0
To: Martin Thomson <martin.thomson@gmail.com>
References: <53456D1B.1010804@alum.mit.edu> <4bf0dffe7f4e475abf38f1e14e09388e@BL2PR03MB419.namprd03.prod.outlook.com> <CABkgnnUPM=AQTk6y2juQoEcPksNWSTCkgPe4846FWDwm5waxPQ@mail.gmail.com> <e01a57761d5d4776968b0d26e86b44b9@BL2PR03MB419.namprd03.prod.outlook.com> <CABkgnnUSU_R2DmCjLV2FPFVX4TCfOfFEZ7ta5bVdakc3bsVkZA@mail.gmail.com> <53459638.50309@alum.mit.edu> <f6cfbd996c9c4456bcfb2fbec10f9f13@BL2PR03MB419.namprd03.prod.outlook.com> <53459E6B.4030900@alum.mit.edu> <5c4a4616b1d34efbb85643d1f26e5410@BL2PR03MB419.namprd03.prod.outlook.com> <CABkgnnX7W8axLhhVg1wUmaUSmHZ_0F+=0ypKC=sN4utp9iD04g@mail.gmail.com> <719f0ee665324b929a0da56e127588fe@BL2PR03MB419.namprd03.prod.outlook.com> <CABkgnnVF4Dt+uOciVSYggvkcauhkhOfn8x_m9cMy3LWET85bag@mail.gmail.com> <EECD972C-A116-4DAC-BF5D-B11BBED41CB5@mnot.net> <534C75D2.3010308@pobox.com> <3276489C-6843-4C01-9E0F-0FD98EB5C1A9@mnot.net> <534C850B.1030505@pobox.com> <CABkgnnUS6WtWnWQSF3Wi6TwxZq_iugb7GOezLubKGvD-PO7eSg@mail.gmail.com>
In-Reply-To: <CABkgnnUS6WtWnWQSF3Wi6TwxZq_iugb7GOezLubKGvD-PO7eSg@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Pobox-Relay-ID: F0D1F21C-C4CF-11E3-83CD-873F0E5B5709-38729857!a-pb-sasl-quonix.pobox.com
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/8QCJwWs8XNlBPpyFtBeyZ7_mYqM
Cc: TLS Mailing List <tls@ietf.org>
Subject: Re: [TLS] Questions about ALPN
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Apr 2014 18:58:43 -0000

Martin Thomson wrote:
> On 14 April 2014 18:02, Michael D'Errico <mike-list@pobox.com> wrote:
>> But then some time later, someone registers "http/2 over HNTP" at code
>> point 139.  The same TLS stack can not possibly know that protocol 139
>> in ALPN means http/2 without an upgrade, leading to a failure.
> 
> That's exactly the failure we're actually looking for here.  Something changed.

Can you please explain why you want things to fail and in what circumstances?

> (BTW, it's strings: "h2" for HTTP/2 over TLS, "h2c" for HTTP/2 over TCP)

Opaque strings are just (large) numbers.  Hopefully you're not suggesting
that the string be inspected for some structure, e.g. it matches a regular
expression such as /^h2/.

Mike

v2.23.0 | Report a Bug | By Email