IETF Logo Mail Archive

[TLS]Re: HRR support (was something else)

Peter Gutmann <pgut001@cs.auckland.ac.nz> Wed, 05 June 2024 13:50 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CE8CC169401 for <tls@ietfa.amsl.com>; Wed, 5 Jun 2024 06:50:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.652
X-Spam-Level:
X-Spam-Status: No, score=-0.652 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_BL_SPAMCOP_NET=1.347, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cs.auckland.ac.nz
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1dR5vN2XXFmF for <tls@ietfa.amsl.com>; Wed, 5 Jun 2024 06:50:09 -0700 (PDT)
Received: from AUS01-SY4-obe.outbound.protection.outlook.com (mail-sy4aus01on2106.outbound.protection.outlook.com [40.107.107.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DAE8EC151997 for <tls@ietf.org>; Wed, 5 Jun 2024 06:50:07 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XCyqfyO5WqfO9g6bUveeRT/dd52NYlGooU46zZKScEm2ksfLF4K7kk+m0tJ+GOx/VZpIkxH+zonhb0PeRFFvpbPYFdroDtqjGMca0mE+Hq6vWtOkEFMBHch3ZECe7tkN4bql4Ea0LH2gR+Jlxafhcvb7aS9kbE+R7i/szAnlT5Rflyg/TXR3GpOw6YZN2l4JkafY32twk+ry4/4FArIXIGVZDNUErrN8tO01cbm58t6IA76nfHii5Wrck6fEbNSe3CNQjrm+6h5ZcnZSYg4yJ7Gx7kGQHfQaabY4t0fM3nerQNUFlXAV6ZZEDeLCP5FcB7aUEBB83BVASg9EsK+D7g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=vGJ0bKsWYNVha3kfHAFarWfneQKrSeew89QU+2AHb+M=; b=oEIo5MwOtUhx3by7iq0DgQZjmlPv6nfPkUIFgp8WbTK+5scFCqO2HE36TMbs/ygGc7+3pcaFK1f1WjVQ0v/etI6+z0kYxSyFbmEO25BvohDdWRaRqK0TG30ajFyasDY8auEejmlwBaM4I/SpRDmQyaYKLNTWNYCuNElJb2ESM6mGBbRpHImhEJglbYA0T4DU+pWOgcVL3ZDsZ3iE2zCGqa8TjQ7DHVey4cKzo1tGSrnIOSboxHcIJYZ6c+0WbvjHF44si16rpXHCR6Hz/TTE0adFuJH8OVdEbp4JYloW2KM1sRYAuM6nSK4hed8MjrjcfHLQeqvX3/TKtt9TmBjS0w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.auckland.ac.nz; dmarc=pass action=none header.from=cs.auckland.ac.nz; dkim=pass header.d=cs.auckland.ac.nz; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.auckland.ac.nz; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vGJ0bKsWYNVha3kfHAFarWfneQKrSeew89QU+2AHb+M=; b=DJVZLrPTqqyfro0l9uiagCj2j0tgsbzVMIItL0ZOomlpFEwRk/xRaVlWXkaxXs9A2kWQODQdQnauhIintj/Zwe/uAOqu8/F32DX16sNCqcAVatXfiYJcepjTaZPW1mgkeNw2doFhgPjZcSSvTnajAYWYdp9kz1FnJ7q1ieTzIBdSr0O6Bb+sDYesH3sK4vDjX7U3Vcsg663iTBkVbegkSgTBUaktOj6HDPPWDc/tEeh1Jv9fDh2wlkMlVzdRQ75fIl6EAX6v4NNLPbXurbWkES0mC6/X3mYwrUhOl9tB3oqn4it7dPc3zlkhW5kRIJDIzufUFsBWMvPY0Lxw1tL02Q==
Received: from ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM (2603:10c6:220:229::18) by SY8P300MB0421.AUSP300.PROD.OUTLOOK.COM (2603:10c6:10:293::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7633.27; Wed, 5 Jun 2024 13:50:04 +0000
Received: from ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM ([fe80::2b6:430a:4d2a:5c52]) by ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM ([fe80::2b6:430a:4d2a:5c52%6]) with mapi id 15.20.7633.021; Wed, 5 Jun 2024 13:50:05 +0000
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: Joseph Birr-Pixton <jpixton@gmail.com>
Thread-Topic: [TLS]Re: HRR support (was something else)
Thread-Index: AQHat00iFCPAj70/c0GfTBUA6RtIj7G5L8DW
Date: Wed, 05 Jun 2024 13:50:04 +0000
Message-ID: <ME0P300MB071353FBB8FCCB180BF65422EEF92@ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM>
References: <20240602184735.362461.qmail@cr.yp.to> <b1183054-5711-4fea-bd5f-4c1794cefd6e@app.fastmail.com> <CAMjbhoW2NnRBYhRYDP4urLfNAfv=Bvdo2r9re+Fo-r=FxqSVWw@mail.gmail.com> <d6bdfeb0-b9aa-4a32-8007-c46716ca3475@app.fastmail.com> <422A67BC-E251-499D-A331-E18BBC1F3971@akamai.com> <CAMjbhoXuB_QDbCb6wKE+b6t6JkHEjKrYMaQz2-zJx01gZ0P1rA@mail.gmail.com> <ef869849-2c9d-4bc8-989b-cf06f50ec8c3@app.fastmail.com> <ME0P300MB071383F6D5389FCE1F0C3585EEF92@ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM> <CACaGApkGFLrGcQ+jwLw9fObxv=6dwLVaVvr+Lvv1qJ_MOOBRFQ@mail.gmail.com>
In-Reply-To: <CACaGApkGFLrGcQ+jwLw9fObxv=6dwLVaVvr+Lvv1qJ_MOOBRFQ@mail.gmail.com>
Accept-Language: en-NZ, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.auckland.ac.nz;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: ME0P300MB0713:EE_|SY8P300MB0421:EE_
x-ms-office365-filtering-correlation-id: 4f94b88b-3015-4a82-5f5f-08dc8566678a
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230031|366007|376005|1800799015|38070700009;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230031)(366007)(376005)(1800799015)(38070700009);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: JykGmUY7ALkDRdG0zcILmn8V/jkG6chK733msoU0dYfN/yS5TsiWu8W64f/pPGVyjxUFd85kOsxQLfX1iKVjpwjyuknm+3/hyInB/ujApdrkst8/2AtXRfEzCevXjslzwvENcUv/V0HcnvNNP5frUKL9cBUPLcBWdV2p3BOGRrhYYrkOwBhzEKv0cjRM09oGmygZbEOjl87sw/3Q7qPey9xF+QZc00NdID0An5+r01iAWrjxEGGa4+8T3WwVrzUgULTE/sBwMrY3zwld4RcyM/qKrq4I4ITwX8BU1ffCUAiB9kIPY7Sdvebl7cGJPcbMzYAJpeM+TNVyC15LhN6KScRpm2ez7ZiGimRivhWF4V0IZmjQFuVX12qNjedM2N7lSuqN9x0GQLeKM8yxaJgZZpbJW3cEBkq+s3S0kPH6s4KPlCvbJfQjFePjyDjpUCZl75d0X3bOOf97OFCJSWFSD3iq9ZiFbKTg8mX1FDwpvSpE7VBvy067vVgOVRrzY6BWdQiVi8WJITW+94peJu1e9TfmR7/Kr4wbJ5q6RATzOkyTdyiX/OS2OAmaFNYQCFz7GQ01Mcke2UP+PtOg/RBuY63yrq7BQ3P6tkqNcu9N9yrA7hiwPF1crMv0e1P5mpEKEu98GFqa6CkunqqW/4SB1Od9rDREEckArj2Yz7vFDwBTwok4ncVTjPr0oPpoFOzTMmzM3nv1IJ1VpaiDSfgWkWJHBRxOMGQ6q6181CN7UwrrcgZzy/sii+ORYF1sHzrEUeTlPmvEyS1xawAcawmk8YLTIpja6wYVZ3k0w5jID1QZC/MeYDrvnc2Fle+OQYbmkdbyjmMbvALu5USxWTyRtsL91dSrg9wVw6JiRqq92hC4s7jioEJ725/cj6gYjZQKcsPonQd0Ap5iapGgvw1tH3zohlQiLPNz83zBgaJgDl6nY6UaAA/HOZk1EPkM94hA9VxkQAM21gb2W4IFr2VhWr7wB4/Dc00TwzO8WgiBJ9j4MJDhMPLglI14ohe2C7yoBvdwqxkSHoQWl8N8ud1QrBcVUrFO8TSR63M16j7H7fT1aJvjR0Hjyf16apFrorlXuMAKM4+ZVVbsZJrODn1MeDBFskQo1t04aFp1kskieQGfasQiAsf5hHaqp7MIMqcUexdSNMEJOUCV0nouT5JA1JuSgsvIkb4dhE+wlBIjWUs6gOH2BX2fT2O8UdQbBVdQP02tKkNiTwVREWhBLDHdUHccvTuXWYmcsEZta1Yg+vlxdncqkmzwy79zSVV528fUAgb2lO1M8XUf8aA2djIn1aYm8icsaatzM42MlZfxmepE2Nk66G28gmc/xXgFJAt9xxgESs3VurhxrcXCnoYqjEI96gUB1DD9zRYOfMXwMf/Hl89tr9eTtbcKOMOaW9vOASUd1ogC7Ow/+7mP1WhR4SImNSQvjy1cdgHrYE3eB+HXgRTx/69kJfzzMjzFSm1LnNvALec2GLIYne3OL6ziu3EKiDRNU0hN1u6LJXQM7oya/eDg4SeMSZkb22gW/UCgNnIoGy8tnLUZPsVz3CIyN7V3v211qs2DMnvJ9yQLU9dYdyzwVcPKJ1y6X0ywL9Xl
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: cs.auckland.ac.nz
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 4f94b88b-3015-4a82-5f5f-08dc8566678a
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jun 2024 13:50:04.9954 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d1b36e95-0d50-42e9-958f-b63fa906beaa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: gjNRhiZjVrvFDY0syfbgkRYmoWenBntNPA2L/DajwxK+iYDtyQ/lu/Na8hImEdwoY1qFfxYFtvBVDbvOXWb1fHaQf9o6CYYnd4RCHKpSw1Q=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SY8P300MB0421
Message-ID-Hash: 7AU53RIYUNTBCV7SOKOOZUKE6NTDOTP6
X-Message-ID-Hash: 7AU53RIYUNTBCV7SOKOOZUKE6NTDOTP6
X-MailFrom: pgut001@cs.auckland.ac.nz
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, "tls@ietf.org" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [TLS]Re: HRR support (was something else)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/PTobZ8Eh8OFzH0ip7bmjjWjDq9s>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Joseph Birr-Pixton <jpixton@gmail.com> writes:

>That is not a correct interpretation, in my opinion. Offering a key_share for
>every MTI key exchange is not required, because:
>
>>   Clients MAY send an empty client_shares vector in order to request
>>   group selection from the server, at the cost of an additional round
>>   trip

Chrome doesn't send an empty client_shares, it just sends one populated with
non-MTI keyex types.

Peter.

v2.37.1 | Report a Bug | By Email | System Status