Re: [TLS] security levels for TLS

Paul Hoffman <paul.hoffman@vpnc.org> Tue, 09 October 2007 22:30 UTC

Return-path: <tls-bounces@lists.ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IfNab-0008Bc-9w; Tue, 09 Oct 2007 18:30:09 -0400
Received: from tls by megatron.ietf.org with local (Exim 4.43) id 1IfNaZ-00088t-MH for tls-confirm+ok@megatron.ietf.org; Tue, 09 Oct 2007 18:30:07 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IfNaZ-00088l-Cj for tls@lists.ietf.org; Tue, 09 Oct 2007 18:30:07 -0400
Received: from balder-227.proper.com ([192.245.12.227]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1IfNaY-0006X3-2Q for tls@lists.ietf.org; Tue, 09 Oct 2007 18:30:07 -0400
Received: from [192.168.1.100] (pool-72-76-39-171.nwrknj.fios.verizon.net [72.76.39.171]) (authenticated bits=0) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id l99MTa5Q019983 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 9 Oct 2007 15:29:39 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Mime-Version: 1.0
Message-Id: <p0624082fc331b0ed0ecc@[192.168.1.100]>
In-Reply-To: <c331d99a0710080621g7c0ec91et35c46553c23f4402@mail.gmail.com>
References: <c331d99a0710080621g7c0ec91et35c46553c23f4402@mail.gmail.com>
Date: Tue, 09 Oct 2007 18:29:33 -0400
To: Nikos Mavrogiannopoulos <nmav@gnutls.org>, tls@lists.ietf.org
From: Paul Hoffman <paul.hoffman@vpnc.org>
Subject: Re: [TLS] security levels for TLS
Content-Type: text/plain; charset="us-ascii"; format="flowed"
X-Spam-Score: 0.0 (/)
X-Scan-Signature: d17f825e43c9aed4fd65b7edddddec89
Cc:
X-BeenThere: tls@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/tls>
List-Post: <mailto:tls@lists.ietf.org>
List-Help: <mailto:tls-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=subscribe>
Errors-To: tls-bounces@lists.ietf.org

Ekr's right: this is not a tractable problem. We could certainly come 
up with some numbers, but they would be meaningless (and therefore 
dangerous) with so much context that we might as well have just given 
the context by itself.

The fact that the W3C wants to wade into this swamp should not lead 
us there, other than to maybe offer them a rope back to the shore 
where they started.

--Paul Hoffman, Director
--VPN Consortium


_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls