IETF Logo Mail Archive

[TLS] Jonathan's "pause" extension

"Salz, Rich" <rsalz@akamai.com> Thu, 23 July 2026 09:52 UTC

Return-Path: <rsalz@akamai.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 4E0AC11D34536 for <tls@mail2.ietf.org>; Thu, 23 Jul 2026 02:52:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784800338; bh=WamVn11zUxX3cMSqmmTzqT4ewJ+8CxB3dXQk0MfOlqA=; h=From:To:Subject:Date; b=J5fbSAFvZaG5BySLP1zI5pUfeEd1Hl7YS71Q8Kfh+Bg6MsYAewSpEYvshQlOvRrn+ npqxMZOxY/eX3UMdBnUuuXYmlvdLuDPOo+c9TG77TCiM7b4hjG2Ek5WPcbp2Xj5BzD j0DA6TY3lhKO7+ijrBGdtw9G9c9gEdpPAVBFIUZ8=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.794
X-Spam-Level:
X-Spam-Status: No, score=-2.794 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xaS--mb7XQhU for <tls@mail2.ietf.org>; Thu, 23 Jul 2026 02:52:17 -0700 (PDT)
Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [67.231.149.131]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B2E9711D3452F for <tls@ietf.org>; Thu, 23 Jul 2026 02:52:17 -0700 (PDT)
Received: from pps.filterd (m0409409.ppops.net [127.0.0.1]) by m0409409.ppops.net-00190b01. (8.18.1.11/8.18.1.11) with ESMTP id 66N8xBGO3995112 for <tls@ietf.org>; Thu, 23 Jul 2026 10:52:16 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h= content-type:date:from:message-id:mime-version:subject:to; s= apr2026.eng; bh=WamVn11zUxX3cMSqmmTzqT4ewJ+8CxB3dXQk0MfOlqA=; b= iqSbcwtlpHSpAB1slGKld9zF1pmGO5n4cjMGBG4yoar2EI8smHx1LTEn0xx2fTUj SYATR3nyV5cZU40mkJasr0Nj+t0ZUUQjMDtVieCESjANQqBgPSVaejlDo873+h8K BOtus4y9B7vC7XJdfVRxh9arEti7MJf1w+y8shpG3OwLBSCBFK18sE1k+3bymi+p movuPbQXj4aaRahHjz4L8C1Ef8Y7yLPPqcKalIm7DiF6itN7wn6Ud6lKjrdx7JEA GnrrZkNUwrJXxttrro4cx8Ol87ZrgPKGM4UY2ZsZJVsqq2PExR8BZP340/tAyFH7 sIDUeTBa3rAFP71dkoUJbw==
Received: from prod-mail-ppoint4 (a72-247-45-32.deploy.static.akamaitechnologies.com [72.247.45.32] (may be forged)) by m0409409.ppops.net-00190b01. (PPS) with ESMTPS id 4fgjtkm429-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <tls@ietf.org>; Thu, 23 Jul 2026 10:52:16 +0100 (BST)
Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.18.1.7/8.18.1.7) with ESMTP id 66N9gQjX019852 for <tls@ietf.org>; Thu, 23 Jul 2026 05:52:15 -0400
Received: from email.msg.corp.akamai.com ([172.27.50.221]) by prod-mail-ppoint4.akamai.com (PPS) with ESMTPS id 4fg4tuv3jd-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <tls@ietf.org>; Thu, 23 Jul 2026 05:52:15 -0400 (EDT)
Received: from ustx2ex-exedge3.msg.corp.akamai.com (172.27.50.214) by ustx2ex-dag5mb4.msg.corp.akamai.com (172.27.50.221) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Thu, 23 Jul 2026 02:52:15 -0700
Received: from ustx2ex-exedge4.msg.corp.akamai.com (172.27.50.215) by ustx2ex-exedge3.msg.corp.akamai.com (172.27.50.214) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Thu, 23 Jul 2026 04:52:14 -0500
Received: from CO1PR07CU001.outbound.protection.outlook.com (72.247.45.132) by ustx2ex-exedge4.msg.corp.akamai.com (172.27.50.215) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43 via Frontend Transport; Thu, 23 Jul 2026 02:52:14 -0700
Received: from MN2PR17MB4031.namprd17.prod.outlook.com (2603:10b6:208:200::22) by DM6PR17MB4101.namprd17.prod.outlook.com (2603:10b6:5:2bc::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.15; Thu, 23 Jul 2026 09:52:13 +0000
Received: from MN2PR17MB4031.namprd17.prod.outlook.com ([fe80::4b85:d514:5021:bba7]) by MN2PR17MB4031.namprd17.prod.outlook.com ([fe80::4b85:d514:5021:bba7%4]) with mapi id 15.21.0245.010; Thu, 23 Jul 2026 09:52:13 +0000
From: "Salz, Rich" <rsalz@akamai.com>
To: "tls@ietf.org" <tls@ietf.org>
Thread-Topic: Jonathan's "pause" extension
Thread-Index: AQHdGoZ++ZFZgQRCnkC1erAZmekKkw==
Date: Thu, 23 Jul 2026 09:52:13 +0000
Message-ID: <MN2PR17MB40310666BBE1097CC321967BCDC02@MN2PR17MB4031.namprd17.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MN2PR17MB4031:EE_|DM6PR17MB4101:EE_
x-ms-office365-filtering-correlation-id: 6314ad13-5744-4848-6394-08dee8a01240
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|23010399003|10070799003|366016|38070700021|18002099003|10067099003|56012099006|8096899003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MN2PR17MB4031.namprd17.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(23010399003)(10070799003)(366016)(38070700021)(18002099003)(10067099003)(56012099006)(8096899003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: sYDkSMY0F/GxnoGyg95YPWLhEHHGOvjMafnPlB3q17PtvJrLKlMOW2cZtXSuMfXUzUtFvfJTBq5QtJz6OwEXxjkpthRxlW5Os0NA1owwJ5BvLEy55I7X2LhB1jZWWKak5SLmppo/Rwa1pD3Wu3RrPMrir5yBS+AJ6gyev7HqLUeEa21fpcdHHTj8YPb3Zz3d0fEV/97JlcSujiJWQonemcTuqBWjfq04OQw/sLxdU4P3bLa47sA8omnelOQ7hQZVprFbx6w2OpfDP6UJOfwBnCsX4xHadIjGPH6IRRE1a3waOxRcma0V/HmklbaUIPDZUg6oQ2eME+Nuo20lgFQr50SBivtpZ9P/FulrqUW+JQ1A87iOSx7f6EAWgtsuu/t9S9hwcUFJRaXX4sFeLIJL4T5hMLLElt4U9Qt5bWL1F+ngc1Q8sxvnojylgyW75p6CD8RcdngG28Zw71O6JSFtuD8qKr5zf84wGmp/X2klJAJYNFaCbHD0AisLk4k41/KpXggy64HeoO3XobfUCtcflJpGJR+E2gUjffDf90ANv889qsn2Ty70HgkPaj+krrddgi1IjAw7G65jtEatPbchPv0tLJs9uxPVnmsvJzr4FZhwPP+URUmxwsWhIu4nhevFdUU8OcuCI37Rq81z+Km3hKMe6SP9jOgVQGdO1GOin7/QwLErpMJUcK2cLfzw148v5ublkghd1BVQlICtBuPSJY+L5yeRLoCiPHc8Qt5g7eLqIDBsH72WUg54CQXzY/QSqaxALdRZTO1S5N5y23OaBJ+Aex7LicE+T5hko6RljCL+RkVDbkhWdQzxeVjx/MVC3zOXcuMrRwO8mtY9I/FkEqjgQGfSWXP20zXazRtMqXqkANFDOYkjWlXw5GXamKO311dxqCU0zEDRrDlODUIZj8N1NfbIpxcWsOhE4ju7AMuBgQAVSsXjq3jbCp1b3taP5rxGHCJwzxaFvNQ+bgGlnVatsK0Po60Iq/p+IXbiWy9uFenIDn9tM5sxaRTZcXaehK7sbl8rAt7CUaUiiTTFvy4Pkok1Q1bebFc1qQOXXtx2snFPHWEEjGGb6F0Q4KOT3RZCMUEw3EkXc9b0IBTf8DvCOHhflmCDD0T2MpLKfkr3cHcNprTcI4KERUozmzdRMA3c1IrauByC8DV1lUE4IPdqv/sf+QNVz6QmkB+d29nEFEqLaT5oSg0L7BJ+a0ctjsSbHI4iiHcEpBgrhujaJYUaTMY7XMQU4piWx/4tUX+od1KLXXACT5jN3E9zWemUeF0xsklU0qPRmiXNh25R+4pl9ZzLagjFK26QROhRFuE44jonc0I4hcmVQnlcHW2q86V4eHzT4brJ27wW9CAzyGfcVPvPqAYiZpJdbmJL3JFxFUaGP3A7O51ImpJydww0Mfvl2YlD7s1OkR+B4FkMkfSje9y4HUibeBEKgUBx6os894oYMbjf3+PBOojJdPpOUuFyW13ofkNCYOLVbGcEtcFnKldOaZs1QKsLrAAigrUSD9I6zXN1HIFtoWfIzsduZZvKyoYJIbLo+p6RQrDKTnT1TY7Okj55/ChnTBJQuvgBgqJ7p9vO3YPrPioSTKxA9sb5MTjMg7ZFiDoswohA4xo/QA3QkkGNGLPpXJKQB/3204iSsIeheA/q0I/QcvwDt2SeErN3mpL65GE04ijr7gMvwkSZLcEJG1U0ynnXhH1PZ5u+FN7h/OCho6/L5WLfzeh8Oy9abJUSvre/0Gga4N4psUX0S9TvzcwjPlOvI7dFHMdUHeb5A14PgpKjf1ssRF3kjTiE
x-ms-exchange-antispam-messagedata-1: 5hWPeifztTv6tA==
arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=lXZ83jenHLoWYqkF3nlb5Hp4KS7K4wJbZvnPcrFCCSVI9wfoTq2OgvQ/Nno+iCOFH6pd/VrZemeQu8VoJQo75oy1AC8zWSBWKgLb1iKxL+IP5eX02C6lnsykhL0lsgAyTJR377UjMasRuS9rEI3PxxdrsrhSsnw02xZ2IsgexTKaRuZGiow0tJn+5SA675wXHPf6U8orYteNOvQ+443djKzZxBp2nRk+l69KavVKV+T5xpTB8aD03SgxyTEaBbPxvZZwDk6hMEYjW7AdTUMuGd1ONak+INf0bWgtEm77B1lBg7JfsuWxD3Rm1R+MfDE2t7Nt/wwN+O0jkG8e+OrACg==
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xG4sm5OSXrxNSq37+sWjVUGHgBnw+epjcjZs3lcbtmo=; b=J4L85LViK4KkzCNBljLr+ti9aNRnVFOA5o2f3oN7BPzPcxtRjcpWXyz5V5N9IQp+KBweJW8D4ZCT2v7f9DZfGicKYHG7UxOKeABrt45kS0+AXdsaLtHlWzlGbQpcBRVx2ny+g9YiMt4YElV/rd4VRluAmtlfq5HRXxmmR1mwcMQtA0w3PBpZ3OETRbt4hg37poewNyWJDRBI6BtntIyT5gesQfF/Lit4kiiwRLfJ8LhoAXKD4O1pGrMg92eiQqrD8XJYb6vffhQpg4yShEP3h5au10rBn9xbpUaSVm0ERPFnh5EtkR8zzP3Vxz+n3ec26W9a44/V7YcQT8YuGTpUgw==
arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=akamai.com; dmarc=pass action=none header.from=akamai.com; dkim=pass header.d=akamai.com; arc=none
x-exchange-routingpolicychecked: UjSUjo+USixcIoxU353nEQxDJNX6P1+QMqBJfpLCwV+J4AARE0YUcoaUg7wcugCTDN6usVIH5zesinSf4k7xwVoyWy3Mdn2wACsghi7ODixHQEMfJ/i5zcd84q1KdcFUY/9QntHTWLUsLEa7oHgecFcun+8200j8IreTrLJowdEaVIhoj6BhwGgH5AsA/prxFE0Dzct9vLpdE4jQhfzwDJ+gQtbk98OtQoDUXiyUtQ0YvtSd8043Vb/RM6yHsqxWCVgMwQ6WRkLpWzMvTOgZuWZr6p64ALcaeDhYE8WjIW/BNTlIY25kYaQQrJIzEjVMweHHL0GSr72l9qFstITjOg==
x-ms-exchange-crosstenant-authas: Internal
x-ms-exchange-crosstenant-authsource: MN2PR17MB4031.namprd17.prod.outlook.com
x-ms-exchange-crosstenant-network-message-id: 6314ad13-5744-4848-6394-08dee8a01240
x-ms-exchange-crosstenant-originalarrivaltime: 23 Jul 2026 09:52:13.1516 (UTC)
x-ms-exchange-crosstenant-fromentityheader: Hosted
x-ms-exchange-crosstenant-id: 514876bd-5965-4b40-b0c8-e336cf72c743
x-ms-exchange-crosstenant-mailboxtype: HOSTED
x-ms-exchange-crosstenant-userprincipalname: UgWpR2FV6gDyOYywfb/pKawKaKx5kGU71NSQ3bCteGETDXcAmK4ot9L1AAhLWykJWrpZyUDjUtJJFYLsk9PQCw==
x-ms-exchange-transport-crosstenantheadersstamped: DM6PR17MB4101
Content-Type: multipart/alternative; boundary="_000_MN2PR17MB40310666BBE1097CC321967BCDC02MN2PR17MB4031namp_"
MIME-Version: 1.0
X-OriginatorOrg: akamai.com
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-23_03,2026-07-22_02,2025-10-01_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 lowpriorityscore=0 malwarescore=0 phishscore=0 spamscore=0 suspectscore=0 adultscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2606160000 definitions=main-2607230096
X-Proofpoint-Spam-Info: AW1haW4tMjYwNzIzMDA5NyBTYWx0ZWRfX4uFBc822RWM5 53PEWz4+GT2CQ+d/yzUl4f3ihq/pTP6of3nieniSb0fa1iNkOwP475s4g2k2fWObN+V1IeBoaEP 4Ky1oK0k11LxYEQWqbBoeCsHcxqoBEM=
X-Authority-Analysis: v=2.4 cv=A6Zc+aWG c=1 sm=1 tr=0 ts=6a61e450 cx=c_pps a=NaJOksh5yBwW9//Q5C/Ubg==:117 a=NaJOksh5yBwW9//Q5C/Ubg==:17 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=RAioF0-LDSMA:10 a=VkNPw1HP01LnGYTKEx00:22 a=Ifg-1AOnLHOf1gn6spyb:22 a=TTBIr9FR-UdC54aaq7Eb:22 a=TY4FQ0dsBOf_KfxNM1oA:9 a=pILNOxqGKmIA:10 a=n9mgQaKC8ASHbQBN:21 a=_W_S_7VecoQA:10
X-Proofpoint-ORIG-GUID: zNNfjHeRSafMbViLPjKRoLbBonT0ELrS
X-Proofpoint-GUID: zNNfjHeRSafMbViLPjKRoLbBonT0ELrS
X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzIzMDA5NyBTYWx0ZWRfXwEZ4MExrEn2u 6k4bo+A1Jv6/PEjSW5QnG8970VtOfLHxf69LwN3K9UhRc9Q9TJtKNJzi19QBrFYltUkRB05yjnV TnbQkwdR7EPRw1UHDQpsbLXV1nZRUzitlRB2teFnRMgAtDhrQmE1zorc40IP7w3Nf7/NJQH7HQ0 fbRD4A93ay40X/ZmjkJNMCkT312AiyRi+HYt06yUgqX79hA1mOQ0yJ6S3nKbGrD4MpOybspg9Kt jaHIJyTqOL0YwutmLDmxPur2ATOnANOYj0/RgSa6uKWvyQk8Cq+ArDR2skt1nTvLUvi74gSrmB3 GrZ3wIV1NLlZDO4qUlCFc/bGroWmAxJkpIkbUfyyTJsUZC/ujg8E8lDQHatzhSwGMvBT+Lultto qbTvKW2f146LWE5v29Zg1OP5o3mNKWlmPTvF7KwkhEGMsptsYyBwKctRXUte6YgVvhHDRXFybQ8 U8rYKJumzs16gM5qQ/A==
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-23_03,2026-07-22_02,2025-10-01_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 lowpriorityscore=0 clxscore=1015 malwarescore=0 bulkscore=0 adultscore=0 phishscore=0 impostorscore=0 spamscore=0 suspectscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2606160001 definitions=main-2607230097
Message-ID-Hash: 3Y2J5V3MVICAWJUWSW54GS6QK4UPT2DP
X-Message-ID-Hash: 3Y2J5V3MVICAWJUWSW54GS6QK4UPT2DP
X-MailFrom: rsalz@akamai.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Jonathan's "pause" extension
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/LQPNIw98yYTMRFt_8hfvHHlCoCs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

I wanted to bring to the list a suggestion Jonathan Hoyland might at the mic line today.

During the Supplemental Authentication discussion, several people brought up the idea of using exporters and channel bindings (9261, 9266). Yaroslav pointed out that it requires application changes to use them.

Jonathan suggested a “pause” extension. Rather than changing the handshake, this new extension would tell the peer that more data is coming and do not accept/send application data until the pause is lifted. He and I chatted after the session, and we realized this could probably handle multi-exchange PAKE traffic as well. Anything that would modify the handshake, or is normally post-handshake (cough, authentication, cough) would also work. Probably need to nail down the semantics such as when to lift the pause (E.g., when you don’t get records with the pause extension or wait until the “done” message is sent, etc), but this seems to me like an elegant solution.


 during the presentation on Suppl
During the Supplemental

v2.46.0 | Report a Bug | By Email | System Status