Re: [TLS] Confirming Consensus on removing RSA key Transport from TLS 1.3

[Daniel Kahn Gillmor <[e-mail]>]

On 05/05/2014 03:28 AM, Nikos Mavrogiannopoulos wrote:

> Shouldn't such a change depend on a fix to the compatibility issues
> present in the DHE ciphersuites? Otherwise it just makes ECDHE the only
> key exchange in TLS that can be made compatible with random peers.
> 
> Elliptic curves are good, but it would be nice to have non-ECC key
> exchanges as well.

I agree with this sentiment, and hope that folks will review my proposal
for improvements to the discrete log DHE key exchange:

 https://datatracker.ietf.org/doc/draft-gillmor-tls-negotiated-dl-dhe/

If you're thinking of other compatibility issues with DHE ciphersuites
aren't covered by that draft, please let me know, i'd like to try to
improve the situation.

I would be happy to have the draft worked on by this WG if people here
think it's useful to the protocol.

(note also that these improvements to DL-DHE do not need to wait until
TLS 1.3 to be useful)

	--dkg