IETF Logo Mail Archive

Re: [TLS] WGLC for "Deprecating TLSv1.0 and TLSv1.1"

Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> Wed, 24 April 2019 14:17 UTC

Return-Path: <kathleen.moriarty.ietf@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74ABA120338 for <tls@ietfa.amsl.com>; Wed, 24 Apr 2019 07:17:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YCaJvegYVBU6 for <tls@ietfa.amsl.com>; Wed, 24 Apr 2019 07:17:49 -0700 (PDT)
Received: from mail-oi1-x22b.google.com (mail-oi1-x22b.google.com [IPv6:2607:f8b0:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C43E12033F for <tls@ietf.org>; Wed, 24 Apr 2019 07:17:49 -0700 (PDT)
Received: by mail-oi1-x22b.google.com with SMTP id v7so14395136oie.8 for <tls@ietf.org>; Wed, 24 Apr 2019 07:17:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=0P3J98tBdn7HC8eFJ+UUjkY9dpFub/S9KhG54h8NGWo=; b=G+HwZBlTBB8F86waB97JTw+yAKnAQBTFw/wreKOfqJwP+zkDxhvNQlJzXkM0LhmcH4 1/U5PHkFtDbJeaFUoQkXquF9G5CKaxQxNaDjbjwfqd7pAqeoWsrlbJFvzeGrudTZVK+6 j4BBFGB0HDhStAulUDpuJi8XYYUhfRrXzs/kdZt9eC2Sc5XL4hlI7m28AwR+/2RC8PoN 5gZ+0Np9BkqPXB3TsTZlHLf0sy3HRFg4HdPkTTEwTq1hb2OboZMUD4jRYRX54SjW9kMf aIzCYLJpCsLEOSzFamqAAALlDNd49lWqwOpZO3f/C4Gqu+wB2x8xjsqvoLu7Obz+PFC+ iACw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=0P3J98tBdn7HC8eFJ+UUjkY9dpFub/S9KhG54h8NGWo=; b=PBwgJ7vFa6XMxVcnui/EMxUifAlx/n9hGwIHStTJei3vFlEvmS6uIU+JlOjt1040+H OZvFYhqbmuTgY3a4deNyXGdQiNJ0yU6t5XZFLUjmsOsTh9BcYrcAaX5IxSviJ9uc3NJW mftVjDa0NaBf5dGuhFrffeymUzxap3UoQD8El+0zt65s1YR6oarJzHKhViVRG1zbHsuV BjRfFIV6m1Ej073UK+LL4ESG/dt4HlCyngyz17JDBGM0nQBwVWx3btyAjjqDDgCXBgNf bIiv6YcCz5AnY4cUge0xH5fuufFq6QrHCV/xJ6rZm2CTxwnXZKz4oBjjR09HOBhGGXID RmyQ==
X-Gm-Message-State: APjAAAWi728/KvgIaaEWFJWwXGlEJ4jObyRiJuR+H2JUd3itDRqkZqVk UMCvKDiVdd2tbAnlzNg2Or3gT2kFs+UeXPwveFAy6o0Q
X-Google-Smtp-Source: APXvYqzcu072hdamjwQeJ+wJTed2OxnMqlKNYST/2N4UfRPYmZJ6LPvIsZC9ZJyLFovb7BwTyERQPu+rm8DEAVaKNrs=
X-Received: by 2002:aca:b156:: with SMTP id a83mr4792995oif.119.1556115468652; Wed, 24 Apr 2019 07:17:48 -0700 (PDT)
MIME-Version: 1.0
References: <28511b10-8f6a-4394-95a9-5188130f7b58@www.fastmail.com> <7f76d36c-962b-78fe-87ab-e17c31430cb3@garygapinski.com>
In-Reply-To: <7f76d36c-962b-78fe-87ab-e17c31430cb3@garygapinski.com>
From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Wed, 24 Apr 2019 10:17:11 -0400
Message-ID: <CAHbuEH7QPv5b2=o6cDZimMhrDELnfqGQ0unZyq=PQC7JhfxyZw@mail.gmail.com>
To: Gary Gapinski <gary=40garygapinski.com@dmarc.ietf.org>
Cc: "<tls@ietf.org>" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000bd17150587475db2"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/UQJHh_jEh4gou4OGPXaEk0HHe2c>
Subject: Re: [TLS] WGLC for "Deprecating TLSv1.0 and TLSv1.1"
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Apr 2019 14:17:59 -0000

Thanks, Gary and others for the helpful feedback and support!  I like
Stephen can look at integrating the suggestions this weekend/early next
week.  Please do keep the comments coming.

Best regards,
Kathleen

On Wed, Apr 24, 2019 at 9:51 AM Gary Gapinski <gary=
40garygapinski.com@dmarc.ietf.org> wrote:

> On 4/12/19 7:28 PM, Christopher Wood wrote:
>
> This is the working group last call for the "Deprecating TLSv1.0 and TLSv1.1” draft available at:
>
>     https://datatracker.ietf.org/doc/draft-ietf-tls-oldversions-deprecate/
>
> Please review the document and send your comments to the list by April 26, 2019.
>
> I think the document should be published.
>
> I agree with Martin Thomson's observation that the SP 800-52r2 quotes in
> Section 2 are a bit prolix considering the relatively small content that
> would remain if excised, and that NIST document has been in draft for a
> prolonged time (reducing its authority). The quotes imply but do not demand
> disuse of TLS 1.0 and TLS 1.1, and could inadvertently be interpreted to
> mean that use of TLS 1.2 rather than TLS 1.3 is sinful.
>
> An additional (congenial) informative reference could be BSI TR-02102-2
> found at
>
>
> https://www.bsi.bund.de/EN/Publications/TechnicalGuidelines/tr02102/index_htm.html
>
> which in §3.2 states "TLS 1.0 and TLS 1.1 are *not recommended*".
>
> Regards,
>
> Gary
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>


-- 

Best regards,
Kathleen

v2.23.0 | Report a Bug | By Email