[TLS] Weekly github digest (TLS Working Group Drafts)

Repository Activity Summary Bot <do_not_reply@mnot.net> Sun, 23 October 2022 07:47 UTC

Feedback-ID: i1c3946f2:Fastmail
Content-Type: multipart/alternative; boundary="===============1819791576220645356=="
MIME-Version: 1.0
From: Repository Activity Summary Bot <do_not_reply@mnot.net>
To: tls@ietf.org
Message-Id: <20221023074629.76C20C14CF14@ietfa.amsl.com>
Date: Sun, 23 Oct 2022 00:46:29 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/L7KfcGN4KySzbXTm28QFJEJ6xOo>
Subject: [TLS] Weekly github digest (TLS Working Group Drafts)
Precedence: list



Issues
------
* tlswg/tls13-spec (+2/-5/💬8)
  2 issues created:
  - token_binding does not have TLS 1.3 extension markers in IANA (by ekr)
    https://github.com/tlswg/tls13-spec/issues/1278 
  - Add a changelog from RFC 8446 (by ekr)
    https://github.com/tlswg/tls13-spec/issues/1274 

  7 issues received 8 new comments:
  - #1278 token_binding does not have TLS 1.3 extension markers in IANA (1 by davidben)
    https://github.com/tlswg/tls13-spec/issues/1278 
  - #1256 AEAD limits for early data (1 by ekr)
    https://github.com/tlswg/tls13-spec/issues/1256 
  - #1247 Lifetime, expiry, and validity of certificates and PSKs (1 by ekr)
    https://github.com/tlswg/tls13-spec/issues/1247 [PR Pending] 
  - #1225 Cache timing warning (2 by davidben, ekr)
    https://github.com/tlswg/tls13-spec/issues/1225 [New PR needed] 
  - #1224 HRR server behavior is underspecified (1 by ekr)
    https://github.com/tlswg/tls13-spec/issues/1224 
  - #1216 Double check issues filed in ekr/ repo. (1 by ekr)
    https://github.com/tlswg/tls13-spec/issues/1216 [Editor Ready] 
  - #1207 Clarify requirements for HkdfLabel  (1 by ekr)
    https://github.com/tlswg/tls13-spec/issues/1207 [propose-close] 

  5 issues closed:
  - Lifetime, expiry, and validity of certificates and PSKs https://github.com/tlswg/tls13-spec/issues/1247 [PR Pending] 
  - Double check issues filed in ekr/ repo. https://github.com/tlswg/tls13-spec/issues/1216 [Editor Ready] 
  - AEAD limits for early data https://github.com/tlswg/tls13-spec/issues/1256 
  - Clarify requirements for HkdfLabel  https://github.com/tlswg/tls13-spec/issues/1207 [propose-close] 
  - losonszky91@gmail.com https://github.com/tlswg/tls13-spec/issues/1268 

* tlswg/draft-ietf-tls-ctls (+0/-2/💬0)
  2 issues closed:
  - Discuss handling of untrusted profiles https://github.com/tlswg/draft-ietf-tls-ctls/issues/56 
  - Omitting empty messages seems unlikely to be safe https://github.com/tlswg/draft-ietf-tls-ctls/issues/73 



Pull requests
-------------
* tlswg/tls13-spec (+8/-1/💬2)
  8 pull requests submitted:
  - Update extension table. Fixes #1241 (by ekr)
    https://github.com/tlswg/tls13-spec/pull/1277 
  - Clarify 0-RTT cache further. Fixes #1225 (by ekr)
    https://github.com/tlswg/tls13-spec/pull/1276 
  - Clarify unsolicited (by ekr)
    https://github.com/tlswg/tls13-spec/pull/1275 
  - Attempt to clarify user_canceled. Fixes #1208 (by ekr)
    https://github.com/tlswg/tls13-spec/pull/1273 
  - Reduce emphasis on timing in the 0-RTT cache attack (by bemasc)
    https://github.com/tlswg/tls13-spec/pull/1272 
  - Clarify how message reinjection is done. Fixes #1227 (by ekr)
    https://github.com/tlswg/tls13-spec/pull/1271 
  - Update KeyUpdate limits with text from RFC 9147. Fixed #1257 (by ekr)
    https://github.com/tlswg/tls13-spec/pull/1270 
  - Errors for bogus tickets. Fixes #1247 (by ekr)
    https://github.com/tlswg/tls13-spec/pull/1269 

  2 pull requests received 2 new comments:
  - #1276 Clarify 0-RTT cache further. Fixes #1225 (1 by ekr)
    https://github.com/tlswg/tls13-spec/pull/1276 
  - #1269 Errors for bogus tickets. Fixes #1247 (1 by ekr)
    https://github.com/tlswg/tls13-spec/pull/1269 

  1 pull requests merged:
  - Reduce emphasis on timing in the 0-RTT cache attack
    https://github.com/tlswg/tls13-spec/pull/1272 

* tlswg/draft-ietf-tls-ctls (+2/-2/💬1)
  2 pull requests submitted:
  - Discuss handling of templates received over untrusted channels (by bemasc)
    https://github.com/tlswg/draft-ietf-tls-ctls/pull/76 
  - Remove discussion of omitting empty messages (by bemasc)
    https://github.com/tlswg/draft-ietf-tls-ctls/pull/75 

  1 pull requests received 1 new comments:
  - #76 Discuss handling of templates received over untrusted channels (1 by ekr)
    https://github.com/tlswg/draft-ietf-tls-ctls/pull/76 

  2 pull requests merged:
  - Discuss handling of templates received over untrusted channels
    https://github.com/tlswg/draft-ietf-tls-ctls/pull/76 
  - Remove discussion of omitting empty messages
    https://github.com/tlswg/draft-ietf-tls-ctls/pull/75 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/tlswg/draft-ietf-tls-semistatic-dh
* https://github.com/tlswg/draft-ietf-tls-md5-sha1-deprecate
* https://github.com/tlswg/draft-ietf-tls-esni
* https://github.com/tlswg/certificate-compression
* https://github.com/tlswg/draft-ietf-tls-external-psk-importer
* https://github.com/tlswg/draft-ietf-tls-ticketrequest
* https://github.com/tlswg/tls13-spec
* https://github.com/tlswg/tls-flags
* https://github.com/tlswg/dtls13-spec
* https://github.com/tlswg/dtls-conn-id
* https://github.com/tlswg/tls-subcerts
* https://github.com/tlswg/oldversions-deprecate
* https://github.com/tlswg/sniencryption
* https://github.com/tlswg/tls-exported-authenticator
* https://github.com/tlswg/draft-ietf-tls-ctls
* https://github.com/tlswg/external-psk-design-team

[TLS] Weekly github digest (TLS Working Group Dra… Repository Activity Summary Bot