Re: [TLS] 0.5 RTT

Martin Thomson <martin.thomson@gmail.com> Tue, 23 February 2016 22:33 UTC

Return-Path: <martin.thomson@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6E6D1B35DD for <tls@ietfa.amsl.com>; Tue, 23 Feb 2016 14:33:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XypBSGCwMxEu for <tls@ietfa.amsl.com>; Tue, 23 Feb 2016 14:33:01 -0800 (PST)
Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 976831B35C8 for <tls@ietf.org>; Tue, 23 Feb 2016 14:33:00 -0800 (PST)
Received: by mail-io0-x233.google.com with SMTP id z135so5280380iof.0 for <tls@ietf.org>; Tue, 23 Feb 2016 14:33:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=fWtjEChAVZuETeAsplfnYIo95yXoHX8n+KR0uqW4Rp8=; b=WVQ2Trk5+ySZCgaB+tzcFOdEcx3jIF7wIoTI/nhD5gDBaJIKgcnozzJrV4BLc2I7v+ DAMPiWdZuFOafLDTxO06DwPBNL3y4BNOiRWM9YvllNmQb5VyTQWCeGCt1Fga+WuNBMLh C78VVeNoHCvfnFSrQx1rglqit2rN3FzhkR8y95QEXt/tBFuX8Tx9HgXIfUNyftZmHZFP qFHFDTkTyw1gCTMOwpjpNmcBKgb40nFZ5HVnIOEPS0vjyMQkpL3cgakmS5j21zTfaOEF k4LmrUVTEG2laMrfquKZZOTV8aH5MU2vhriweRv2ELfVabDh6ctVQrVNqvBtUr8BryhE dgOg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=fWtjEChAVZuETeAsplfnYIo95yXoHX8n+KR0uqW4Rp8=; b=OMC9uDpmm26fjnYtJn/iBVRCF9TbpQJSjBlh2XCRm6P9ajijo5oY//V260mKwTncBA V5wf14s0v27EavGwhqSVyXkJB6mJGUJDI6CXKtFptT6PeoWSpEixUItWUrv0OjianW/3 rtLtiRp0M2D+FVMkH63NJHqNvG+jw4RwP31lBypyLSjUNhZRquxKVQv6FxwS94+5Nyg6 AntraIc0xozfNtC/WrdC8yJIszKP7R9GiTVUiOBBFccOmSX7F+HjSJkl046OJzgJSSec Tm159Shn+UaRBWz6v9PZ0+T+FC0Wo6iIP3SrpIBF2MG2EZ51mzL0bidrwhNYL4Pis1dU jEKg==
X-Gm-Message-State: AG10YOQSvVvud72QWI1MLsS1S2ZOM/YXwmQ6o796lh0crRyv3qbUXJuRCKwHXr4fA2Jk1niEQNcCjEvSx/HZ8Q==
MIME-Version: 1.0
X-Received: by 10.107.131.27 with SMTP id f27mr38342101iod.190.1456266780093; Tue, 23 Feb 2016 14:33:00 -0800 (PST)
Received: by 10.36.53.79 with HTTP; Tue, 23 Feb 2016 14:33:00 -0800 (PST)
In-Reply-To: <CADi0yUNKiFuAXK-qFjdOc0SBHfd1Gkp=UoEK5OxAw5Cps70Ryw@mail.gmail.com>
References: <CABkgnnW1LRhSA_i0nL=rDYnUwBZWg5dSys7yk6aDefYWptnpZQ@mail.gmail.com> <8FA1A0FD-B911-474F-AC08-6208A80EB980@gmail.com> <CADi0yUPOEL++R+_Nhy4NTfhzsA6UjbVbMAEiPx1Qg9+vPPHt7g@mail.gmail.com> <35EE1C1C-132D-47A1-ADF3-5AD3C3D5EE4D@gmail.com> <CADi0yUNKiFuAXK-qFjdOc0SBHfd1Gkp=UoEK5OxAw5Cps70Ryw@mail.gmail.com>
Date: Tue, 23 Feb 2016 14:33:00 -0800
Message-ID: <CABkgnnVUxuxVFj-i=N5L3nhRu=XjRhmMDGRPFyXrdsiPXkytPA@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Hugo Krawczyk <hugo@ee.technion.ac.il>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/RdDhycdvinbuxj8XPwo2cjQ8VpU>
Cc: Karthikeyan Bhargavan <karthik.bhargavan@gmail.com>, "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] 0.5 RTT
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Feb 2016 22:33:02 -0000

On 23 February 2016 at 14:26, Hugo Krawczyk <hugo@ee.technion.ac.il> wrote:
> Karthik, I think that what you are pointing to are cases where the client
> *is* authenticated via its PSK.


In the downgrade scenario, that doesn't seem right, but maybe it's
just that the client's ClientHello is being authenticated.