Re: [TLS] draft on new TLS key exchange

[Peter Gutmann <[e-mail]>]

"Dan Harkins" <[e-mail]> writes:

>  TLS-PSK: resistance to dictionary attack
>  TLS-SRP: elliptic curve support, divorcing domain parameter set from
>     the password

So it's a proposal that adds a few obscure geeky features to two existing
mechanisms that vendors have already decided not to adopt (wrongly, in my
opinion, but that doesn't change the lack of adoption).  Why would they
suddenly rush to support this one if they've ignored the other two (and a
string of earlier drafts along the same lines)?

(As a more general comment, this draft should be, if anything, an Experimental
and not a Standards-Track, given its context).

>I'm curious why you are not asking the authors of the SEED, Camellia, and
>Clefia drafts what those drafts give us that the AES ciphersuites don't
>already do.

Those three are fashion-statement RFCs whose reasons for existence have little
(if anything) to do with security.  Does that mean this draft is also a
fashion statement?

Peter.