Re: [TLS] Working Group Last Call for draft-ietf-tls-downgrade-scsv-00

[Martin Thomson <[e-mail]>]

On 20 October 2014 04:53, Martin Thomson <[e-mail]> wrote:
> On 20 October 2014 04:47, Nikos Mavrogiannopoulos <[e-mail]> wrote:
>> Indeed, there is an arguments to keep that mechanism, as there are still
>> some TLS 1.3 intolerant servers. But instead of prolonging the life of
>> such an insecure mechanism wouldn't it make sense to fix those broken
>> servers instead; e.g., by peer pressure by documenting the
>> implementations that are not TLS 1.3-ready in [0]?
>
> I think that we should do that, but as a practical matter, I suspect
> that we'll be stuck with some amount of fallback for a while yet.  I
> find the TLS 1.3 intolerance numbers pretty alarming in this regard;
> even with rapid improvement, I doubt it will go away quickly.

...enough.