IETF Logo Mail Archive

[TLS] Proposed change in TLS-Flags

Yoav Nir <ynir.ietf@gmail.com> Mon, 29 June 2020 21:33 UTC

Return-Path: <ynir.ietf@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 617493A0D62 for <tls@ietfa.amsl.com>; Mon, 29 Jun 2020 14:33:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IFmYX5oFyFxC for <tls@ietfa.amsl.com>; Mon, 29 Jun 2020 14:33:42 -0700 (PDT)
Received: from mail-ed1-x530.google.com (mail-ed1-x530.google.com [IPv6:2a00:1450:4864:20::530]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E207D3A0D61 for <tls@ietf.org>; Mon, 29 Jun 2020 14:33:41 -0700 (PDT)
Received: by mail-ed1-x530.google.com with SMTP id e15so14308443edr.2 for <tls@ietf.org>; Mon, 29 Jun 2020 14:33:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:message-id:date:to; bh=Njf4Bn0dovVqyVE2lxyrvxRDROkXafYu7yHKHqE3hjI=; b=b9Kke7SrZNyWjpHW/ztw2eYD76tZ1zjxh1eAR8o5Zn3V5h6UVriD1KCMUQut3OVMnO fLJ1a3VYL1G7LQzIWRK9cfy3TvfLd9QAC2XuNMzbdthmPZ0MgWM6V49TY5qA7i8zPIaL hr4cZ6RvKoVfCMmBgVt/KZk1HKoa1lFH76RZ2BSodf4zVU4RaslDxOaEGuB5/MPTNYGp 9pVJZK8VSy8gxYswdKOkGssTE+kVFPI6YBlOeIs3e3rIKp3P2Tnt3Q28pNuAbS49EksO d/ZtWazUMRtppey9uV2pjvkFjHJNkhgby6FB0ZI0vnSDdh/POS10Szwpgk5wzCH57spO AaCQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:date:to; bh=Njf4Bn0dovVqyVE2lxyrvxRDROkXafYu7yHKHqE3hjI=; b=igYeQW+G6HJxiQgFy8I1z0gg/dSsry04JroCDfFmRJWGw3V+kyyr6VW6qlVC816NDM N/u7RX68YLdsK+g3FVbIr4BiVSBynGQFgTsHyeF9p7+ggm8yiXLQ/2HHTDMiKjGOb0hC iQ0s49xljqDYIJ59+GGxFe///Bg0ZRVpGCk5isdFKMc+zW6Hog8sF5wy03FSlysDxwUv 6Je1QZWRmA0xX6Fc7y9PlAKdN6bBgOGNvhd7cAWGtw0khS6P/El8V/qHuG0mR17u0xSM MiRDhX11Id65ET2KzEwzCH9u0tMrLFQ2gu+mAjCOx2puCU6KLODZk6horfj53FTqfpJU T2Ww==
X-Gm-Message-State: AOAM532+l3MGWp8IWRLl1wzZw+7r2bCTeZqwqvu+LNN4yHh20zPQK7RB pMy6INS655z8oxlm8z5qg7rP1Bw0
X-Google-Smtp-Source: ABdhPJxHvwv2LYxWGfcsAh29Uk4m7MUlky2GA0Mfd/zPitlxvVILqK9fwWmej0RWeA4FuyRL8Dod4w==
X-Received: by 2002:a50:fd12:: with SMTP id i18mr20176491eds.371.1593466419781; Mon, 29 Jun 2020 14:33:39 -0700 (PDT)
Received: from [192.168.1.12] ([46.120.57.147]) by smtp.gmail.com with ESMTPSA id p5sm753814edt.69.2020.06.29.14.33.38 for <tls@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 29 Jun 2020 14:33:39 -0700 (PDT)
From: Yoav Nir <ynir.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_650EDCA3-339C-44D3-87F7-6F1B9F086DD6"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Message-Id: <1CAC4193-E0CD-4C29-BC05-CED0617BEE19@gmail.com>
Date: Tue, 30 Jun 2020 00:33:37 +0300
To: "<tls@ietf.org>" <tls@ietf.org>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/9qyg1G6N7xFKE27qyO9prHVXR9U>
Subject: [TLS] Proposed change in TLS-Flags
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jun 2020 21:33:44 -0000

Hi

I’ve just submitted the following PR:

https://github.com/tlswg/tls-flags/pull/4 <https://github.com/tlswg/tls-flags/pull/4>

Three changes:
It is no longer allowed to send an empty flags extension.  If you don’t support any flags, don’t send the extension.
The server is no longer allowed to respond with flag types that the client didn’t indicate support for first.
I’ve split the extension description section into a format section and a rules section

Please comment. Barring any objections, I’ll merge the PR just before the submission deadline.

Yoav

v2.23.0 | Report a Bug | By Email