Re: [TLS] Removing support for custom unnamed DIffie-Hellman groups

Eric Rescorla <ekr@rtfm.com> Mon, 21 July 2014 14:56 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B243F1A0103 for <tls@ietfa.amsl.com>; Mon, 21 Jul 2014 07:56:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level:
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XE3gJ3DlM0FC for <tls@ietfa.amsl.com>; Mon, 21 Jul 2014 07:56:45 -0700 (PDT)
Received: from mail-we0-f172.google.com (mail-we0-f172.google.com [74.125.82.172]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DECD1A016B for <tls@ietf.org>; Mon, 21 Jul 2014 07:56:44 -0700 (PDT)
Received: by mail-we0-f172.google.com with SMTP id x48so7788802wes.31 for <tls@ietf.org>; Mon, 21 Jul 2014 07:56:43 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=AovVWFSH+LAKw00RdQNvvrCWIuArNVA/7S7fdcvSbkg=; b=I0CBXP2hderw6ZuZ23sG9vUorBVmHhOahqbtbMaAxfzZfpOBXcn9lx7JSo695dY6fy OCajfunLl368ktFSv+TdXCa5rDqJ0fxBhMUy+ziRfNu0jIYWffKCY67yMTosQB0jLKkc Pca/z1FT+YWBVkw+QMhuGLkKgJE110VC/d7FaZkNKXQJkEEwDyU0AsCI5qHSPhlQV1G9 honRVWqAF1Hklrh0henRFcu7/71H0rCuyq0jL5tPw9o839erliy5QS9HalnBMbawZJEb 5vIwgJmJqgsBX5g1TvnEiP8PGZ9u5zeuU8eeR7WWDzaAYd3b8cPQAlQE0cSfOx5PiEKr I3Sw==
X-Gm-Message-State: ALoCoQmm3DfBKb+txW8Guw0UBDnpS99rSZAuWe9glRwEMVSjyZmTnF3RAgEy7FRkHNLwgFEc08/6
X-Received: by 10.194.91.228 with SMTP id ch4mr23995742wjb.59.1405954603056; Mon, 21 Jul 2014 07:56:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.217.128.12 with HTTP; Mon, 21 Jul 2014 07:56:02 -0700 (PDT)
X-Originating-IP: [2001:67c:370:176:fd4c:933f:5f3e:943e]
In-Reply-To: <FDFD304C-2646-4016-8435-798E096F8C2C@vigilsec.com>
References: <3BA3F4D9-84FF-45ED-A1D3-F00C649019DC@cisco.com> <FDFD304C-2646-4016-8435-798E096F8C2C@vigilsec.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Mon, 21 Jul 2014 07:56:02 -0700
Message-ID: <CABcZeBNak_=wEuWPjFHfdAS0OfROhwu-Y--GL6v_pSu2xCkVEA@mail.gmail.com>
To: Russ Housley <housley@vigilsec.com>
Content-Type: multipart/alternative; boundary=047d7bd91d9eaf902f04feb550c5
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/9z5wEXjw-LIvDOmLY909Vfy5uSw
Cc: "<tls@ietf.org>" <tls@ietf.org>
Subject: Re: [TLS] Removing support for custom unnamed DIffie-Hellman groups
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Jul 2014 14:56:46 -0000

On Mon, Jul 21, 2014 at 7:51 AM, Russ Housley <housley@vigilsec.com> wrote:

> I think this means that only well-known groups will be used.


Yes.



>  I am assuming that an IANA registry will be used to provide identifiers
> for these well-known groups.  If that is correct, then I fully support this
> direction.


Yes:
http://tools.ietf.org/html/draft-ietf-tls-negotiated-dl-dhe-00#section-7

-Ekr


>
> Russ
>
> On Jul 21, 2014, at 10:45 AM, Joseph Salowey (jsalowey) wrote:
>
> > At the interim there was support for removing support for custom unnamed
> Diffie-Hellman groups from TLS 1.3.  If you have an objection please
> respond on the list by July 25, 2014.
> >
> > Thanks,
> >
> > Joe
> > [For the chairs]
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>