IETF Logo Mail Archive

Re: [TLS] Consensus Call on MTI Algorithms

Dave Garrett <davemgarrett@gmail.com> Thu, 02 April 2015 22:05 UTC

Return-Path: <davemgarrett@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EEF91A86F4 for <tls@ietfa.amsl.com>; Thu, 2 Apr 2015 15:05:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FV_NRu3Zhrtb for <tls@ietfa.amsl.com>; Thu, 2 Apr 2015 15:05:14 -0700 (PDT)
Received: from mail-qg0-x22d.google.com (mail-qg0-x22d.google.com [IPv6:2607:f8b0:400d:c04::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A33E1A3BA3 for <tls@ietf.org>; Thu, 2 Apr 2015 15:05:14 -0700 (PDT)
Received: by qgep97 with SMTP id p97so81240068qge.1 for <tls@ietf.org>; Thu, 02 Apr 2015 15:05:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:subject:date:user-agent:cc:references:in-reply-to :mime-version:content-type:content-transfer-encoding:message-id; bh=xYCskg7MaQRyWDsoN6QY7qIlUZT6os22BRS1VrY0zzM=; b=AYFv1XpNo8C/2JKa74cs3XdoFyZE0SZqWPJ3m3lgVQT1hzdKJFl2wE4epiQg+X2Pq/ 5nVPwR14QCGCQ2xyDiaemt/cpaItpUYnyCkPVpCeseQg1Y98d7WjOrl5qKDOJ4B9Qpjq JtTxNFs61sci0ek1mPPuu4otG1QCBmcOQvoOuhnigSjfWMa9Pkwdql8lwqHo4WV3iL9d PHsw6MqIa4mAjQ3emDDVXDC4mxbHxAIyGBXG8vbtuiPmj78J9vraOcIS+SpJ5B3+BUFf 4TowDfCdGikjOo8S59r/exk0wvkoh6+Pxik6t13pLU9iM3jKz6WptvfAmOtS9DmFSKp6 qwJQ==
X-Received: by 10.229.214.199 with SMTP id hb7mr66402553qcb.12.1428012313345; Thu, 02 Apr 2015 15:05:13 -0700 (PDT)
Received: from dave-laptop.localnet (pool-96-245-254-195.phlapa.fios.verizon.net. [96.245.254.195]) by mx.google.com with ESMTPSA id f44sm4400837qgd.3.2015.04.02.15.05.12 (version=TLSv1 cipher=RC4-SHA bits=128/128); Thu, 02 Apr 2015 15:05:12 -0700 (PDT)
From: Dave Garrett <davemgarrett@gmail.com>
To: Yoav Nir <ynir.ietf@gmail.com>
Date: Thu, 02 Apr 2015 18:05:11 -0400
User-Agent: KMail/1.13.5 (Linux/2.6.32-73-generic-pae; KDE/4.4.5; i686; ; )
References: <CAOgPGoBk+E=cNV1ufBaQ0n7=CJQ34zukPixKCEdpmMLBX=Kg_w@mail.gmail.com> <201504021612.35877.davemgarrett@gmail.com> <45AA2438-891F-4B36-AD2C-EA06D57ED8EF@gmail.com>
In-Reply-To: <45AA2438-891F-4B36-AD2C-EA06D57ED8EF@gmail.com>
MIME-Version: 1.0
Content-Type: Text/Plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-Id: <201504021805.11751.davemgarrett@gmail.com>
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/IztKd9x_RRra8H6JExbHCNtOJV8>
Cc: "TLS@ietf.org (tls@ietf.org)" <tls@ietf.org>
Subject: Re: [TLS] Consensus Call on MTI Algorithms
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Apr 2015 22:05:19 -0000

On Thursday, April 02, 2015 05:28:09 pm Yoav Nir wrote:
> But that aside, “the web” as represented by the HTTP/2 document made its own profile. For applications other than “the web”, UTA made their BCP document. For the IoT DICE made their profile. 
> 
> So everyone has their own MTI algorithms, some of them contradictory to what we are proposing to recommend. So who takes their MUSTs and SHOULDs from TLS as opposed to their own niche document?

HTTP/2 & 1.1 will be using the MTIs in the TLS 1.3 spec. The additional requirements on TLS in the HTTP/2 spec are explicitly restricted to TLS 1.2 use. (TLS 1.0 & 1.1 being prohibited) The only requirement on TLS 1.3+ use is mandatory usage of SNI.


Dave

v2.37.1 | Report a Bug | By Email | System Status