Re: [TLS] New draft: draft-rescorla-tls13-new-flows-01

[Nikos Mavrogiannopoulos <[e-mail]>]

On Wed, 2014-02-19 at 12:40 -0800, Eric Rescorla wrote:
> Folks,
> I have prepared a new version of the TLS 1.3 flows document which
> should appear in the repository shortly and in the meantime can be
> found at:

Hello,
 I haven't read it yet to comment, but may I suggest something
procedural? I think it would be better to first agree on the list of
issues that TLS 1.3 will fix, and the list of features it will bring, 
and the security requirements for this protocol; as the charter is very
high level for that.

I believe you have already done that as part of your presentation in
IETF 88, and there was some discussions on the list some time ago, but I
don't know what was considered or discarded. It would be nice to have a
draft that sets the desired requirements for TLS 1.3. (I'd volunteer
maintain one if that is the issue)

Then it will be much more easy to check whether a proposed solution
satisfies the requirements, and input from other unrelated groups such
as CFRG would be more easy to get.

regards,
Nikos

PS. As I believe that security protocol design is part of cryptography, 
I'm still of the opinion that we should more actively seek for external
expertise (e.g., by a competition or other appropriate methods).