Re: [TLS] Fwd: Last Call: <draft-ietf-kitten-tls-channel-bindings-for-tls13-09.txt> (Channel Bindings for TLS 1.3) to Proposed Standard

I don't believe that this document should update 8446. As noted in S 1, we
didn't define these bindings because we didn't have complete analysis. This
document doesn't seem to either contain or reference such analysis and
until we have that, I think RFC 8446 shouldn't be retconned into endorsing
this construction.

-Ekr

On Fri, Oct 1, 2021 at 12:00 PM Benjamin Kaduk <kaduk@mit.edu> wrote:

> This draft got some previous discussion on the WG list, but it's worth
> having people take another look at it during last call.
> In particular, note that it updates RFC 8446.
>
> -Ben
>
> On Fri, Oct 01, 2021 at 11:20:35AM -0700, The IESG wrote:
> >
> > The IESG has received a request from the Common Authentication Technology
> > Next Generation WG (kitten) to consider the following document: -
> 'Channel
> > Bindings for TLS 1.3'
> >   <draft-ietf-kitten-tls-channel-bindings-for-tls13-09.txt> as Proposed
> >   Standard
> >
> > The IESG plans to make a decision in the next few weeks, and solicits
> final
> > comments on this action. Please send substantive comments to the
> > last-call@ietf.org mailing lists by 2021-10-15. Exceptionally, comments
> may
> > be sent to iesg@ietf.org instead. In either case, please retain the
> beginning
> > of the Subject line to allow automated sorting.
> >
> > Abstract
> >
> >
> >    This document defines a channel binding type, tls-exporter, that is
> >    compatible with TLS 1.3 in accordance with RFC 5056, On Channel
> >    Binding.  Furthermore it updates the "default" channel binding to the
> >    new binding for versions of TLS greater than 1.2.  This document
> >    updates RFC5801, RFC5802, RFC5929, and RFC8446.
> >
> >
> >
> >
> > The file can be obtained via
> >
> https://datatracker.ietf.org/doc/draft-ietf-kitten-tls-channel-bindings-for-tls13/
> >
> >
> >
> > No IPR declarations have been submitted directly on this I-D.
> >
> >
> >
> >
> >
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>