Re: [TLS] TLS 1.3 -> TLS 2.0?

Yoav Nir <ynir.ietf@gmail.com> Wed, 31 August 2016 17:34 UTC

Content-Type: multipart/alternative; boundary="Apple-Mail=_026F708B-E99F-4049-8E53-5B0418BB1E4F"
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: Yoav Nir <ynir.ietf@gmail.com>
In-Reply-To: <CY1PR0301MB084231AD8DF90812959E25578CE30@CY1PR0301MB0842.namprd03.prod.outlook.com>
Date: Wed, 31 Aug 2016 20:34:28 +0300
Message-Id: <29F42251-E802-44A1-988D-EA615BBC2143@gmail.com>
References: <201608301419.33620.davemgarrett@gmail.com> <2135572.Ea2pKTvtKx@pintsize.usersys.redhat.com> <878tvex8a6.fsf@alice.fifthhorseman.net> <DF0CFCAF-7B80-428D-87A5-7A577CFE3323@gmail.com> <CY1PR0301MB084231AD8DF90812959E25578CE30@CY1PR0301MB0842.namprd03.prod.outlook.com>
To: Andrei Popov <Andrei.Popov@microsoft.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Oe_xP_bAhNvt3XY5JCV-4Ej-ncs>
Cc: "<tls@ietf.org>" <tls@ietf.org>
Subject: Re: [TLS] TLS 1.3 -> TLS 2.0?
Precedence: list

> On 31 Aug 2016, at 8:28 PM, Andrei Popov <Andrei.Popov@microsoft.com> wrote:
> 
>> No they don’t always look at the 16-bit field (although they might), but they look at you funny when you tell them that 1.0 > 3.0 and that you should totally disable 3.0 and prefer to use 1.2 instead.
> :) True, but when this happens, I simply tell them that all SSL versions are broken, so they have to use TLS.
> I'd rather have a consistent versioning story for TLS (1.0->1.1->1.2->2.0), rather than trying to fix the SSL3->TLS1.0 inconsistency at this point.
> It's already fun enough to explain why DTLS jumped from 1.0 to 1.2 (or Windows from 8 to 10, for that matter).

I once had to explain to a GUI designer why this piece of UI genius was not a good idea

    Choose the minimal support SSL / TLS version:
         |       |
         +-------+
          | 1.0 |
          | 1.1 |
          | 1.2 |
          | 2.0 |
          | 3.0 |
          +-----+

Re: [TLS] TLS 1.3 -> TLS 2.0? Andrei Popov
Re: [TLS] TLS 1.3 -> TLS 2.0? Peter Gutmann
[TLS] TLS 1.3 -> TLS 2.0? Dave Garrett
Re: [TLS] TLS 1.3 -> TLS 2.0? Xiaoyin Liu
Re: [TLS] TLS 1.3 -> TLS 2.0? Dave Garrett
Re: [TLS] TLS 1.3 -> TLS 2.0? Hubert Kario
Re: [TLS] TLS 1.3 -> TLS 2.0? Erik Nygren
Re: [TLS] TLS 1.3 -> TLS 2.0? Rob Stradling
Re: [TLS] TLS 1.3 -> TLS 2.0? Xiaoyin Liu
Re: [TLS] TLS 1.3 -> TLS 2.0? Nikos Mavrogiannopoulos
Re: [TLS] TLS 1.3 -> TLS 2.0? Julien ÉLIE
Re: [TLS] TLS 1.3 -> TLS 2.0? Peter Gutmann
Re: [TLS] TLS 1.3 -> TLS 2.0? Hubert Kario
Re: [TLS] TLS 1.3 -> TLS 2.0? Xiaoyin Liu
Re: [TLS] TLS 1.3 -> TLS 2.0? Hubert Kario
Re: [TLS] TLS 1.3 -> TLS 2.0? Daniel Kahn Gillmor
Re: [TLS] TLS 1.3 -> TLS 2.0? Salz, Rich
Re: [TLS] TLS 1.3 -> TLS 2.0? Yoav Nir
Re: [TLS] TLS 1.3 -> TLS 2.0? =JeffH
Re: [TLS] TLS 1.3 -> TLS 2.0? Brian Sniffen
Re: [TLS] TLS 1.3 -> TLS 2.0? Andrei Popov
Re: [TLS] TLS 1.3 -> TLS 2.0? Yoav Nir
Re: [TLS] TLS 1.3 -> TLS 2.0? Dave Garrett
Re: [TLS] TLS 1.3 -> TLS 2.0? Bill Frantz
Re: [TLS] TLS 1.3 -> TLS 2.0? Nick Sullivan
Re: [TLS] TLS 1.3 -> TLS 2.0? Erik Nygren
Re: [TLS] TLS 1.3 -> TLS 2.0? Dave Garrett
Re: [TLS] TLS 1.3 -> TLS 2.0? Richard Barnes
Re: [TLS] TLS 1.3 -> TLS 2.0? Dave Garrett
Re: [TLS] TLS 1.3 -> TLS 2.0? Eric Mill
Re: [TLS] TLS 1.3 -> TLS 2.0? Judson Wilson
Re: [TLS] TLS 1.3 -> TLS 2.0? Adam Caudill
Re: [TLS] TLS 1.3 -> TLS 2.0? Dave Garrett
Re: [TLS] TLS 1.3 -> TLS 2.0? Yoav Nir
Re: [TLS] TLS 1.3 -> TLS 2.0? Joseph Lorenzo Hall
Re: [TLS] TLS 1.3 -> TLS 2.0? Peter Gutmann
Re: [TLS] TLS 1.3 -> TLS 2.0? Colm MacCárthaigh