IETF Logo Mail Archive

[TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS

Stephen Farrell <stephen.farrell@cs.tcd.ie> Thu, 20 February 2025 12:47 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25520C14CE5E for <tls@ietfa.amsl.com>; Thu, 20 Feb 2025 04:47:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.009
X-Spam-Level:
X-Spam-Status: No, score=-2.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jnlugAyhKI9E for <tls@ietfa.amsl.com>; Thu, 20 Feb 2025 04:47:34 -0800 (PST)
Received: from EUR02-DB5-obe.outbound.protection.outlook.com (mail-db5eur02on2113.outbound.protection.outlook.com [40.107.249.113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7B7BC151995 for <tls@ietf.org>; Thu, 20 Feb 2025 04:47:34 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=meieY7zRshmv/K3mdTNtfGvwy3skprGSDLBjBz/Y+gmtACVTkVzXvEA0mSiBDpj7KjKt7+GvoXC+KxB9mHXs4Yky+44fDnriItnKZIDwyeT1bpfjGCDlOKCbFFXOnWKSZQ8H1Ekxa/cinMV391QWBf8W4NcyKpqhz1RWcjE+11GX1cpZC72aJsZF2emHvu5/+hHSxi2/2nLSd8wzwIh4O7J+PwaV8+h/tnVS/J6TOOzF09mMd4b4mEFDymDNh7fUxjJKHFMTJ973MwMDqKVNlsQwCzRQburCxIL9ULNMg8i1ugtJeSBCGTnOO/dO/lA0DD4GbBsZxw/6TXV7I3YBkg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=bMlvYO9488opqOVQemOevx0D0APkpvBQBGqy3zoyEgY=; b=v4EOEf2pSnDAM+1imjSY1UGHUV+CgBsZjUKIJDYtC8OID0YBy3bimve9iIfDA+r7Ge9nz5PZALoc4MPfaHzA67fK+8OB1QL7uzEOZMZgzluso7Nt9cBQL2vocM/mraUcYM676UqY+68ps8hnn1Qu34MTW8wMoXXi3GcMmZ1nnpQZPiC1s4C9pqqqvt8jRIKm7y/9LGUqH8AUKtb9GtPcm83Ve+cqtTNsuIqomTT1qmIxWmR1nfoa9UActAmIoAcHLdbFJFVO1Pu6P/bbpeqJTYeJfJ5vDTJara8WwyHH04h/AznfKz8C9QDS37idngFdNg906DV3h+beP0RzEKCGOg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bMlvYO9488opqOVQemOevx0D0APkpvBQBGqy3zoyEgY=; b=HBJFQxmd7qMpNHSigSiTgHrLNYfWuAVEou2A3gijbCVodRtIKrjWEHO4cHUlwCI9RgoSFWylV88FPybTZg9lY66KNIRNh1aLpIHEtmYisZVBh3zmLmW9Hl2rEvbrchU9oYMaSuDeeqnagExd5ZgDf9r7xhYjD5DzEzKcd1f3F88+2eIgCCeGvvpxGNnbVLKw+8Px7XVvmGx3DqK8/+EfIxHjrt+kLMsk31dGaJ9sBmJpIn01NFUV002MdxAs6cw6DMIO5rUMP+KV7AIB2Y/V4FSXCySaHq88+AmskJOUbjgBKXTuS3wSd68NELN0Wq7eGwGdLsBgwS35HMAiSBqSiQ==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16) by PAVPR02MB9572.eurprd02.prod.outlook.com (2603:10a6:102:302::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8445.18; Thu, 20 Feb 2025 12:47:28 +0000
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a]) by DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a%3]) with mapi id 15.20.8466.015; Thu, 20 Feb 2025 12:47:28 +0000
Message-ID: <68995b4c-4cd9-4153-9fff-004c3dbdeb01@cs.tcd.ie>
Date: Thu, 20 Feb 2025 12:47:27 +0000
User-Agent: Mozilla Thunderbird
To: Alicja Kario <hkario@redhat.com>, "Bellebaum, Thomas" <thomas.bellebaum@aisec.fraunhofer.de>
References: <6a27cae41645539b3fa90b5f83a8973c73cdd6a0.camel@aisec.fraunhofer.de> <CA+_8xu1nDDHuqRbh2OvRVkvxPyLcJS==rumo3sxPC56NsWLCMw@mail.gmail.com> <93eb1e78c7348459fc92ff874c7e691baf4a0bf0.camel@aisec.fraunhofer.de> <ee908b7b-da13-4840-b70a-84dd66d4bc1f@redhat.com>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <ee908b7b-da13-4840-b70a-84dd66d4bc1f@redhat.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------ZM2uKchWx6nj5wdfDPb8Efla"
X-ClientProxiedBy: DUZPR01CA0175.eurprd01.prod.exchangelabs.com (2603:10a6:10:4b3::19) To DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB8PR02MB5946:EE_|PAVPR02MB9572:EE_
X-MS-Office365-Filtering-Correlation-Id: 45557249-fff0-4c0f-0e43-08dd51acbbc9
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|366016|10070799003|1800799024;
X-Microsoft-Antispam-Message-Info: BmJu+VOGEUNg4XbfhdMe6hi0lLvFlEPlCXqW3skx9ZmUBKwqsf5y9rr+728GI++4fMuFL1uTRlBlNFwDVcXpXCy+DNP4/YLagCobi59+OlaH7d5NQaHixjwuyHlJZ4fIeDe7iE+fOJIG/T0hnQhBn6jllxnTONfsEIIgdwixgSQELRZCxzDE6Vv1/tDeOV8yZ535/LPB2gk8eT7NWMINEnkxAC2AEsA0C+yoSRvoIXkSTWo0i1WhHK98ZWd5Mic/E/SR1Ahnvd47gNa3cQ0AX+gVMoqqonF7a+wd46WO2SrRMs72TcQxXQl/vVMYm14fIdHyrdnjhDJMQFu6oHXYE0X5i4RaTh7oLf0Rg+LOGf8XOjRFfefzPffXLtY7YGMicxEKBDUu8wYDB9yonqi5Q31Ca/0MkKXjxsz5t4K9u0fnOZ8DUvRr4o/cHYlKvuEM07QNBggQ0Yj67ibE4LmML+ID/TLbFUf9CNG3NjXxoBz00DkYJ+6OKcWomFW80bctRHs+/KRke3mK+XDCqLtySocXB/fSxm8K1/51zau78v6YLj34g1eKTQXE0s6viU/zDDh51qyepgFN/DP8HPHxQuIespRB8AtoAXicGAa7CNjdmiYqZ460eyVmSGD2lraaZqNOHKSmRawJTeelzUz9pTS+GZ9jY5Vnz8T9/fOYj7GaaDrhBPL2Jxc0muxVMR0HegXQvKM0k8QLGwZmF66ooz3gE3Z0raMWHbnL2uIRYP8PCn9Na10hzz/HTjzU6RxK3zZCN4oBIlin8IIZqem6ItalJe6i9KF6+uJbJp74LBPuCtcLVtzhoJUHApILkv9pjAk6EixGnrikzfeVvgzD2//2sFQx4lnbqs5LFiHUiwjln1DLOascUoRJ/IJAj2eDpDAs5MPR5zs7jwTrp2znZhPqEy4WsT8SncASJcngGlnwnIFcU+qbrpB/XvFs0qm1Owr1M6VvLp0+/J1ZdSCH2qjen7i7JCLuF0pr6Xiy3bN95yF6kY7jcxOjo0ZloJZ21PrH2uUPk9SuRGeaCiaTnsNJPXhSn+9pwKFp4UwHZb5/iiccBeJhWAKYauJjZVyoOufix3JTWdzg6dqDKFj0A8dvvDMM/EqfVsNixSFqWYv1VKqo7OrKGUgEIO21gbYTq02nPNeY+AApUfowJeQ4tsUZRb62A8u2UYhvf/PHJJQdQOc1FF5Q7K12dt/cgbbs6ycV2zpLQjpy6rJuSFpiluZO0MA8EqASSCM8b4SSzO4M0mEXAZbu/GI8e+F4Nx6B6CEGcOGB9wPZekPthb0rKrj+moO8J0sTxQWDzpKVqepxnVCLLAZcPYKAaEG71yyw897ad/efE4zov0eN6TZh5e+DbUDt8ScQ6YTANUpcUS4ApQD1iAWEJWxd6T5/aPLt
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB8PR02MB5946.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(10070799003)(1800799024);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 45557249-fff0-4c0f-0e43-08dd51acbbc9
X-MS-Exchange-CrossTenant-AuthSource: DB8PR02MB5946.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Feb 2025 12:47:28.4402 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: ZDYdOSIC5vF3rRhZWm5XutRqDxWQ0D7WGkClbJm59sE9P5A3SViUDTdM9n4McF/A
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAVPR02MB9572
Message-ID-Hash: IM2XXSZYOCKP7AP62PSMO276MDSJG3NH
X-Message-ID-Hash: IM2XXSZYOCKP7AP62PSMO276MDSJG3NH
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tls@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/VL-fWuLSe-G9Ez6REi-i4e_lVU4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>


On 20/02/2025 12:36, Alicja Kario wrote:
> sorry, but the threat model you're talking about is not realistic

I disagree.

While it may not be feasible to notify a user, the threat of
widely deployed software that supports key exfiltration being
abused is real, and made worse by us standardising on this
way of documenting what is to be exfiltrated.

If we were solely concerned with security the bytes sent,
then this document wouldn't exist (here).

Cheers,
S.

v2.46.0 | Report a Bug | By Email | System Status