Re: [TLS] Encryption of TLS 1.3 content type

[Daniel Kahn Gillmor <[e-mail]>]

On 07/28/2014 04:55 AM, Nikos Mavrogiannopoulos wrote:
> Unless TLS 1.3 intended to include a length hiding mechanism
> I see this change as unnecessary and I agree with Watson on that.

One of the motivations to support this change is due to the possibility
of length-hiding within TLS (which might be indicated by a new
content-type), as well as leaving the door open to other future content
types that might or might not be sensitive.  It was a design error to
ever leave this information in the clear in the first place, afaict.  We
should fix it.

If we have to throw a dummy byte (or two, if we need to include the
version) per (D)TLS record to appease middleboxes, we can do that, but
that should be strictly for the sake of working around the ossified
network stack.

	--dkg