IETF Logo Mail Archive

Re: [TLS] New cached-info draft 09 posted

Michael D'Errico <mike-list@pobox.com> Tue, 13 July 2010 17:40 UTC

Return-Path: <mike-list@pobox.com>
X-Original-To: tls@core3.amsl.com
Delivered-To: tls@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3345B3A6848 for <tls@core3.amsl.com>; Tue, 13 Jul 2010 10:40:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JUr40Psvob3q for <tls@core3.amsl.com>; Tue, 13 Jul 2010 10:40:10 -0700 (PDT)
Received: from sasl.smtp.pobox.com (a-pb-sasl-quonix.pobox.com [208.72.237.25]) by core3.amsl.com (Postfix) with ESMTP id 6DD073A6B11 for <tls@ietf.org>; Tue, 13 Jul 2010 10:40:06 -0700 (PDT)
Received: from sasl.smtp.pobox.com (unknown [127.0.0.1]) by a-pb-sasl-quonix.pobox.com (Postfix) with ESMTP id 52242C43A3; Tue, 13 Jul 2010 13:40:14 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=pobox.com; h=message-id :date:from:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; s=sasl; bh=MklB8/7SiXk8 e/iPHoFJMSeMQQ8=; b=xQ/yYabIKSxGwPSWj2rDdcvicukoJMA8piukushAAayZ Wz4yxykCE1ziH1sB4l8lqvB3iiJcz5TXNe4ZPAVWkkWwcxVEyv80EQtfi/NSX41y ywA3Amrhlh3rr8lu2rA9Bi2u4+q0kI2vxkvZ/LZNoADBw0kVOu41yhYI3QZhoMI=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=pobox.com; h=message-id:date :from:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; q=dns; s=sasl; b=PmxYmL 0HMDduArLWOCMjz9xCEtYIkW+KtGjIM8VAF1GZMFlKjDsMkafhDu6X7pi1UiTU10 xoWth2HMlqCH5c3TSqgMDL7wqpQPRTD13r31vz9+V+5isRdPdG93+HtDEw3fs81y rYzz4+Ll47y2pq+5Cfr6xbywO2fh3BxXA3EW8=
Received: from a-pb-sasl-quonix. (unknown [127.0.0.1]) by a-pb-sasl-quonix.pobox.com (Postfix) with ESMTP id 37C8BC43A1; Tue, 13 Jul 2010 13:40:13 -0400 (EDT)
Received: from administrators-macbook-pro.local (unknown [24.234.114.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by a-pb-sasl-quonix.pobox.com (Postfix) with ESMTPSA id 5F74FC43A0; Tue, 13 Jul 2010 13:40:11 -0400 (EDT)
Message-ID: <4C3CA4FA.3050206@pobox.com>
Date: Tue, 13 Jul 2010 10:40:10 -0700
From: Michael D'Errico <mike-list@pobox.com>
User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812)
MIME-Version: 1.0
To: Stefan Santesson <stefan@aaa-sec.com>
References: <C8615980.C7C6%stefan@aaa-sec.com>
In-Reply-To: <C8615980.C7C6%stefan@aaa-sec.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Pobox-Relay-ID: B0D6A946-8EA5-11DF-B39E-9056EE7EF46B-38729857!a-pb-sasl-quonix.pobox.com
Cc: tls@ietf.org
Subject: Re: [TLS] New cached-info draft 09 posted
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Jul 2010 17:40:20 -0000

Stefan Santesson wrote:
> 
> We had a very long debate about this and we finally reached an agreement.
> Can we stick with it or do we have to redesign this over and over again?

I'm not sure if you were disagreeing with me, so I'll clarify.  My point
was that this struct:

       struct {
            CachedInformationType type;
            HashAlgorithm hash;
            opaque hash_value<1..255>;
       } CachedObject;

uses HashAlgorithm from RFC 5246.  There is no value for the MD5/SHA-1
combo hash used in TLS 1.0 and 1.1, so we need to pick something that
has an identifier.

Mike

v2.23.0 | Report a Bug | By Email