Re: [TLS] Call for adoption of draft-vvv-tls-cross-sni-resumption

On Mon, Nov 9, 2020 at 11:51 PM Martin Thomson <mt@lowentropy.net> wrote:

> I've no objection to adopting this, though I will note that it is likely
> of minimal use in the browser context due to the move to isolated storage
> (which includes tickets).  The potential value for cross-origin connections
> on the same page exists, but it would be good to understand whether the
> advantages seen are significant enough to justify the effort and
> complication involved.
>

That's fine, since in most of the cases where this is useful the top-level
origin is the same.

> Thus, the draft needs to include privacy considerations, particularly
> regarding cross-origin tracking.  I am also of the opinion that it should
> use flags, but that would depend on changes to the flags draft.
>

I considered that.  This particular attack seems to be fairly web-specific,
and since the mitigation (network partition keys
<https://fetch.spec.whatwg.org/#network-partition-keys>) relies heavily on
Web concepts, I'm not sure a TLS draft would be a good place for describing
it (compared to, say, Fetch).

> On Tue, Nov 10, 2020, at 14:44, Joseph Salowey wrote:
> >
> > Based on interest and support expressed at IETF 108, this email starts
> > the call for adoption of draft-vvv-tls-cross-sni-resumption. The draft
> > can be found here:
> >
> >
> >
> >    https://tools.ietf.org/html/draft-vvv-tls-cross-sni-resumption-00
> >
> >
> >
> > This adoption call will run until November 30, 2020. Please indicate
> > whether or not you would like to see this draft adopted. Note that this
> > is an adoption call for the draft as a starting point towards solving
> > the problem of resumption across SNI values. The final mechanism may
> > certainly change depending on related efforts, e.g.,
> > draft-ietf-tls-tlsflags.
> >
> >
> >
> > Thanks,
> >
> >
> >
> > Sean, Chris and Joe
> >
> > _______________________________________________
> > TLS mailing list
> > TLS@ietf.org
> > https://www.ietf.org/mailman/listinfo/tls
> >
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>