Re: [TLS] TLS 1.3 process

["Salz, Rich" <[e-mail]>]

> The TLS WG charter is pretty clear that the intention isn't to design a completely new protocol but rather to revise TLS,
> and specifically to "place a priority in minimizing gratuitous changes to TLS."

+1.

It seems to me that there are almost three viewpoints within this WG.  With the hope that I'm equally unfair to everyone, I'd summarize them like this:
	- Update to modern crypto knowledge to fix bugs, and some modern features and be done
	- Make big changes to fix serious problems
	- Start over from a clean sheet; "I don't know what it will be, but we'll call it TLS."

I put myself in the first group (except for SNI encryption, which will get a separate post :), could be convinced to support something from the second once it's written down, and am probably not qualified to evaluate anything from the third group (few people are). Interestingly, barring divine intervention, the above list is probably in order of length of time needed, as well. That would seem to indicate that there's room for all three efforts here.

	/r$

--  
Principal Security Engineer
Akamai Technology
Cambridge, MA