Re: [TLS] Confirmation of Consensus on Removing Compression from TLS 1.3

Acknowledged.

I will prepare these changes (and those for the other two issues) as git
pull
requests and notify the list so that people can confirm that the changes
accurately capture the consensus of the WG.

-Ekr

On Sat, Apr 26, 2014 at 8:24 AM, Joseph Salowey (jsalowey) <
jsalowey@cisco.com> wrote:

> We have strong confirmation of consensus to remove compression from TLS
> 1.3.   The Editor is requested to make the appropriate changes to the draft
> on github.
>
> Joe
> [For the chairs]
> On Mar 26, 2014, at 11:42 AM, Joe Salowey <jsalowey@cisco.com> wrote:
>
> > The use of compression within TLS has resulted in vulnerabilities that
> can be exploited to disclose TLS encrypted application data.   The
> consensus in the room at IETF-89 was to remove compression from TLS 1.3 to
> remove this attack vector.  If you have concerns about this decision please
> respond on the TLS list by April 11, 2014.
> >
> > Thanks,
> >
> > Joe
> > [Speaking for the TLS chairs]
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>