IETF Logo Mail Archive

Re: [TLS] (draft) WG adoption call: draft-bmoeller-tls-falsestart

Martin Thomson <martin.thomson@gmail.com> Wed, 01 April 2015 17:04 UTC

Return-Path: <martin.thomson@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 924691A0030 for <tls@ietfa.amsl.com>; Wed, 1 Apr 2015 10:04:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QKI9gt7nZzUM for <tls@ietfa.amsl.com>; Wed, 1 Apr 2015 10:04:02 -0700 (PDT)
Received: from mail-ob0-x22e.google.com (mail-ob0-x22e.google.com [IPv6:2607:f8b0:4003:c01::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA1CB1A002D for <tls@ietf.org>; Wed, 1 Apr 2015 10:04:01 -0700 (PDT)
Received: by obbfy7 with SMTP id fy7so3933160obb.2 for <tls@ietf.org>; Wed, 01 Apr 2015 10:04:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=wzBHTdjOhPGWX9/flol456MunoLJYT0dQesjImYWxaA=; b=VuzG7FiKA7nemM60c02wxXPpfL20oHG92fqFgynFAMSUdJdlv5c2pSgf7k7+wYZ/bY 5mejB2o9rh+y4SLnFfYsFR2lOGareNFuvRjHqTIwh1BuqBUofQnYOB7+i31DuR/kFkOK xDJ6IpliKCEKZ89aEYDUzKQDAcPL+dGRb12kMI9RyrE+4VGP+EFMxWUUI6LsPym7l1Wx FCp2xUAyY9WIHbL1K6DOZGpAG9JDG2X7BypRJclGvsSQ8yEL5a9aQixNdEri8kFWe6Xv rnLF8f2c5yab/cit4LFjD07uBIXTQQcYLlMb85cqOzpk+sqXrJvmKpVUZXdV0Y9MuZVF /buw==
MIME-Version: 1.0
X-Received: by 10.182.88.136 with SMTP id bg8mr41829946obb.86.1427907840356; Wed, 01 Apr 2015 10:04:00 -0700 (PDT)
Received: by 10.202.48.151 with HTTP; Wed, 1 Apr 2015 10:04:00 -0700 (PDT)
In-Reply-To: <CAFewVt4fEnNsJSrHWjT-NqPR4x3v-_=gib3a9KWR2YJC6-0v8Q@mail.gmail.com>
References: <813475A8-DC71-42BA-A27E-DF11B0155FD1@ieca.com> <CAFewVt4fEnNsJSrHWjT-NqPR4x3v-_=gib3a9KWR2YJC6-0v8Q@mail.gmail.com>
Date: Wed, 01 Apr 2015 10:04:00 -0700
Message-ID: <CABkgnnXLhDTNjtpVv73HTgieBjLmnXTPbsO76RqpDLazr0nDKA@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Brian Smith <brian@briansmith.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/H5Vn189dml2e11PAqcLBsnZbu5E>
Cc: "<tls@ietf.org>" <tls@ietf.org>
Subject: Re: [TLS] (draft) WG adoption call: draft-bmoeller-tls-falsestart
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Apr 2015 17:04:08 -0000

On 31 March 2015 at 19:33, Brian Smith <brian@briansmith.org> wrote:
>
> 4. The references to (FF-)DHE key exchange being acceptable for False
> Start are removed. Although it may be possible to safely implement
> False start for FF-DHE, the current draft isn't a good starting point
> for specifying how that might be done. It's better to remove the
> references until an adequate description of doing False Start for
> FF-DHE key exchange is available, if ever.

I agree with most of what Brian says, particularly with respect to
only accepting the "best" profile of TLS here.  However, I am
generally leery of making specific recommendations regarding cipher
suite choice.  With the explicit groups, this might be OK.  Without
explicit groups, I think that Brian's point is completely valid.

v2.23.0 | Report a Bug | By Email