Re: [TLS] Consensus Call for acceptance of draft-gillmor-tls-negotiated-dl-dhe-02

I favor the draft.

In sec. 3.1 however, I would rather define a new Server Key Exchange
message type, where only dh_Ys is sent (and signed). For complying
implementations, this should be a small change to implement, but it
completely eliminates ambiguous messages and signatures thereof.

We could push even further, and force the server to use the same messages
as the client: Key Exchange + Certificate Verify (to defeat cross protocol
attacks); but I understand this is a long shot for a draft which is meant
to be minimal and quick to implement.

Best,
Alfredo

On Mon, Jun 23, 2014 at 7:27 AM, Joseph Salowey (jsalowey) <
jsalowey@cisco.com> wrote:

> WG Members,
>
> The chairs would like to get the sense of the WG on adopting
> as a WG document:
>
> http://tools.ietf.org/html/draft-gillmor-tls-negotiated-dl-dhe-02
>
> Please make any comments in favor of or against adoption by
> Friday July 4. Note: the chairs are aware that there has been
> some discussion of the specific groups in this document.
> Adopting this document does not commit the WG to these
> groups as some or all of these groups may be changed prior
> to publication.
>
> Thanks
>
> Joe
> (for the chairs)
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>