MIME-Version: 1.0
Sender: mglt.ietf@gmail.com
In-Reply-To: <CABkgnnXdtkeshZSpUvqH7uk0KAPYqKdcq+JZy4i0bGJinWJFQg@mail.gmail.com>
References: <20160527171935.11166.82258.idtracker@ietfa.amsl.com>
 <7a3597ae-92b8-23c8-b2c3-357f6fdb6792@bouncycastle.org>
 <6CE18F17-F8E0-4F4A-95A4-BE9B3A8250A2@sn3rd.com>
 <80bc8ae67e0ba0e2355b26bdbb34d1b6.squirrel@www.trepanning.net>
 <D41FA5C6.52E9B%john.mattsson@ericsson.com>
 <CADZyTkkJv2yyd5p7CR8p5gHCE+gjWQNu-+39N4RW-26gh+NzSA@mail.gmail.com>
 <CADZyTkmHwL=2MVQOUKwDkMur_gMiT_00Q6EY-h=zOUbfeddAOA@mail.gmail.com>
 <CADZyTkm05WD_DSHFUJMtPughDQKuS2-ZwRVwuHPFdLh=tAthzA@mail.gmail.com>
 <1478593476.2532.29.camel@redhat.com>
 <CADZyTknYBNHCucPxZODCLrjvA-UvPuFojkTfUXhh0n-y_eekVA@mail.gmail.com>
 <1478598547.2532.57.camel@redhat.com>
 <CADZyTk=Z8VV3LRsSbvL5Vg3PdHeMwcnm538M8CZkdZMF0TEHYQ@mail.gmail.com>
 <CABkgnnXdtkeshZSpUvqH7uk0KAPYqKdcq+JZy4i0bGJinWJFQg@mail.gmail.com>
From: Daniel Migault <daniel.migault@ericsson.com>
Date: Sun, 13 Nov 2016 21:43:41 -0500
Message-ID: <CADZyTknbY-1LXsR1TxJiyYLVL1kTWFO0h_hU10EHyg8Xm5xiqQ@mail.gmail.com>
To: Martin Thomson <martin.thomson@gmail.com>,
 Nikos Mavrogiannopoulos <nmav@redhat.com>
Content-Type: multipart/alternative; boundary=001a11484830d219d5054139ce17
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/SUk9ov0wV87lVQLRNCzPhkZFg_Q>
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] I-D Action: draft-ietf-tls-ecdhe-psk-aead-00.txt
Precedence: list

--001a11484830d219d5054139ce17
Content-Type: text/plain; charset=UTF-8

I removed all these recommendations on 128/256 security. I believe this
address this thread.

I also believe a profile document would be useful and detail these details.
Do you have any opinion about such a document ?

Tank you for the feed backs!

Yours,
Daniel

On Tue, Nov 8, 2016 at 7:24 PM, Martin Thomson <martin.thomson@gmail.com>
wrote:

> On 8 November 2016 at 21:08, Daniel Migault <daniel.migault@ericsson.com>
> wrote:
> > TLS enable curve negotiation but not for code point. This makes
> restrictions
> > on code points hard to implement.  As a result Endpoints MAY treat
> > negotiation of key sizes smaller than the lower limits as a connection
> error
> > of type insufficient_security(71) for TLS 1.2 and TLS 1.3.
>
> I really had a hard time parsing this.  You don't connect this to
> Diffie-Hellman at all, but I think that is what you are talking about.
> But if your point is that this is an ECDHE-specific draft, then you
> don't need to say anything at all.
>
> nit "TLS enables"
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>

--001a11484830d219d5054139ce17
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div>I removed all these recommendations on 128/256 s=
ecurity. I believe this address this thread. <br><br>I also believe a profi=
le document would be useful and detail these details. Do you have any opini=
on about such a document ?<br><br></div><div>Tank you for the feed backs!<b=
r><br></div>Yours, <br></div>Daniel<br></div><div class=3D"gmail_extra"><br=
><div class=3D"gmail_quote">On Tue, Nov 8, 2016 at 7:24 PM, Martin Thomson =
<span dir=3D"ltr">&lt;<a href=3D"mailto:martin.thomson@gmail.com" target=3D=
"_blank">martin.thomson@gmail.com</a>&gt;</span> wrote:<br><blockquote clas=
s=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;pad=
ding-left:1ex"><span class=3D"">On 8 November 2016 at 21:08, Daniel Migault=
 &lt;<a href=3D"mailto:daniel.migault@ericsson.com">daniel.migault@ericsson=
.com</a>&gt; wrote:<br>
&gt; TLS enable curve negotiation but not for code point. This makes restri=
ctions<br>
&gt; on code points hard to implement.=C2=A0 As a result Endpoints MAY trea=
t<br>
&gt; negotiation of key sizes smaller than the lower limits as a connection=
 error<br>
&gt; of type insufficient_security(71) for TLS 1.2 and TLS 1.3.<br>
<br>
</span>I really had a hard time parsing this.=C2=A0 You don&#39;t connect t=
his to<br>
Diffie-Hellman at all, but I think that is what you are talking about.<br>
But if your point is that this is an ECDHE-specific draft, then you<br>
don&#39;t need to say anything at all.<br>
<br>
nit &quot;TLS enables&quot;<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
______________________________<wbr>_________________<br>
TLS mailing list<br>
<a href=3D"mailto:TLS@ietf.org">TLS@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/tls" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/tls</a><br>
</div></div></blockquote></div><br></div>

--001a11484830d219d5054139ce17--