Return-Path: X-Original-To: tls@ietfa.amsl.com Delivered-To: tls@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2BBA12E86E; Thu, 22 Feb 2018 01:19:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4aBm852fGezk; Thu, 22 Feb 2018 01:19:01 -0800 (PST) Received: from esa2.dyson.c3s2.iphmx.com (esa2.dyson.c3s2.iphmx.com [68.232.133.94]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70680124319; Thu, 22 Feb 2018 01:19:00 -0800 (PST) X-IronPort-SPF: SKIP X-IronPort-AV: E=McAfee;i="5900,7806,8811"; a="30403344" X-IronPort-AV: E=Sophos;i="5.47,377,1515456000"; d="scan'208";a="30403344" Received: from unknown (HELO uk-dlp-smtp-01.dyson.global.corp) ([62.189.202.16]) by esa2.dyson.c3s2.iphmx.com with ESMTP; 22 Feb 2018 09:28:27 +0000 Received: from uk-dlp-smtp-01.dyson.global.corp (uk-dlp-smtp-01.dyson.global.corp [127.0.0.1]) by uk-dlp-smtp-01.dyson.global.corp (Service) with ESMTP id BCD0AFA10; Thu, 22 Feb 2018 07:47:00 +0000 (GMT) Received: from UK-MAL-CAS-01.dyson.global.corp (unknown [10.1.108.2]) by uk-dlp-smtp-01.dyson.global.corp (Service) with ESMTP id A36EAFA02; Thu, 22 Feb 2018 07:47:00 +0000 (GMT) Received: from UK-MAL-CAS-03.dyson.global.corp (10.1.108.111) by UK-MAL-CAS-01.dyson.global.corp (10.1.108.2) with Microsoft SMTP Server (TLS) id 14.3.319.2; Thu, 22 Feb 2018 09:18:45 +0000 Received: from UK-MAL-MBOX-01.dyson.global.corp ([fe80::3975:cbc9:490b:523a]) by UK-MAL-CAS-03.dyson.global.corp ([10.1.108.111]) with mapi id 14.03.0319.002; Thu, 22 Feb 2018 09:18:45 +0000 From: Tony Putman To: Martin Thomson CC: "draft-ietf-tls-tls13@ietf.org" , "" , IETF discussion list Thread-Topic: [TLS] external PSK identity enumeration Re: UPDATED Last Call: (The Transport Layer Security (TLS) Protocol Version 1.3) to Proposed Standard Thread-Index: AQHTqx5FKb1d2DSy/UuxaAWe7a4q2aOu6G0AgAABUgCAAAFbgIAAlF+AgACk6TA= Date: Thu, 22 Feb 2018 09:18:44 +0000 Message-ID: <140080C241BAA1419B58F093108F9EDC10B7F9B4@UK-MAL-MBOX-01.dyson.global.corp> References: <151880080195.1349.14035524657942875385.idtracker@ietfa.amsl.com> <1545738.SpB3f87gQo@pintsize.usersys.redhat.com> <21708133.DmTAOkxbDk@pintsize.usersys.redhat.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.1.108.27] Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Archived-At: Subject: Re: [TLS] external PSK identity enumeration Re: UPDATED Last Call: (The Transport Layer Security (TLS) Protocol Version 1.3) to Proposed Standard X-BeenThere: tls@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Feb 2018 09:19:02 -0000 Rm9yIGV4dGVybmFsbHkgZXN0YWJsaXNoZWQgUFNLcyAoZXNwZWNpYWxseSBmb3IgSW9UIGRldmlj ZXMpIHRoZSBpZGVudGl0eSBjYW4gYmUgYXMgc2ltcGxlIGFzIGEgc2VyaWFsIG51bWJlciwgZWFz aWx5IGVudW1lcmF0ZWQuIEkgdGhpbmsgaXQgd291bGQgYmUgYSBtaXN0YWtlIHRvIHBsYWNlIHJl cXVpcmVtZW50cyBvbiB0aGUgc3RydWN0dXJlIG9mIHRoZSBpZGVudGl0eSB0byByZXNvbHZlIHRo aXMgKGlmIGl0IG5lZWRzIHJlc29sdmluZyk7IElNSE8gdHJlYXRpbmcgdGhlIHNpdHVhdGlvbiBp biB0aGUgc2FtZSB3YXkgYXMgb25lIHdoaWNoIGRvZXMgbm90IGluY2x1ZGUgYSB2YWxpZCBQU0sg aXMgYmV0dGVyLiBCdXQgSSBhZ3JlZSB3aXRoIEVyaWMgdGhhdCB3ZSBzaG91bGQgaGVhciBmcm9t IGNyeXB0b2dyYXBoZXJzIG9uIHRoaXMuDQotLSBUb255DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQpGcm9tOiBUTFMgW21haWx0bzp0bHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mIE1hcnRpbiBUaG9tc29uDQpTZW50OiAyMSBGZWJydWFyeSAyMDE4IDIzOjIzDQpUbzogRXJp YyBSZXNjb3JsYQ0KQ2M6IGRyYWZ0LWlldGYtdGxzLXRsczEzQGlldGYub3JnOyA8dGxzQGlldGYu b3JnPjsgSUVURiBkaXNjdXNzaW9uIGxpc3QNClN1YmplY3Q6IFJlOiBbVExTXSBleHRlcm5hbCBQ U0sgaWRlbnRpdHkgZW51bWVyYXRpb24gUmU6IFVQREFURUQgTGFzdCBDYWxsOiA8ZHJhZnQtaWV0 Zi10bHMtdGxzMTMtMjQudHh0PiAoVGhlIFRyYW5zcG9ydCBMYXllciBTZWN1cml0eSAoVExTKSBQ cm90b2NvbCBWZXJzaW9uIDEuMykgdG8gUHJvcG9zZWQgU3RhbmRhcmQNCg0KSSB0aGluayB0aGF0 IHRoZSBjdXJyZW50IGJlaGF2aW9yIGlzIGZpbmUsIGJ1dCB3ZSBtaWdodCBhZGQgdGV4dCB0bw0K c3VnZ2VzdCB0aGF0IGlkZW50aXRpZXMgYmUgc2VsZi1hdXRoZW50aWNhdGluZyB0byBhdm9pZCB0 aGlzIHNvcnQgb2YNCmVudW1lcmF0aW9uLiAgTm90ZSB0aGF0IGluIGNvbW1vbiBwcmFjdGljZSwg dGhpcyBzb3J0IG9mIGVudW1lcmF0aW9uDQp3b3VsZCBiZSBvdmVyIGFuIGluZmVhc2libHkgbGFy Z2Ugc3BhY2UsIGl0J3Mgb25seSB3aGVyZSBpZGVudGl0aWVzDQphcmUgbW9yZSBlYXNpbHkgZW51 bWVyYWJsZSB0aGF0IGl0IGJlY29tZXMgYW4gaXNzdWUgKGUuZy4sICJ0ZWQiIGFzIGFuDQppZGVu dGl0eSwgcmF0aGVyIHRoYW4gYSBzZWxmLWVuY3J5cHRlZCBzZXNzaW9uIHRpY2tldCkNCg0KT24g VGh1LCBGZWIgMjIsIDIwMTggYXQgMTozMSBBTSwgRXJpYyBSZXNjb3JsYSA8ZWtyQHJ0Zm0uY29t PiB3cm90ZToNCj4gaSB0aGluayB5b3VyIGdlbmVyYWwgcG9pbnQgaXMgc291bmQgaGVyZSwgYnV0 IEknbGwgbml0cGljayB0aGUgc3RhdGVtZW50DQo+IHRoYXQNCj4gImlmIHRoZSBzZXJ2ZXIgcmVj b2duaXNlcyBhbiBpZGVudGl0eSBidXQgaXMgdW5hYmxlIHRvIHZlcmlmeSBjb3JyZXNwb25kaW5n DQo+IGJpbmRlciIuDQo+DQo+IDEuIFRoZSBzZXJ2ZXIgb25seSBwaWNrcyBvbmUgaWRlbnRpdHkg c28geW91IGlmIHlvdSBzZW5kIEEsIEIsIGFuZCBDIGFuZCB5b3UNCj4gZ2V0IGFuIGFib3J0LCB5 b3UgZG9uJ3Qga25vdyBpZiBpdCByZWNvZ25pemVkIG9uZSBvciBhbGwuDQo+IDIuIFRoZSBzZXJ2 ZXIgY2FuICpyZWNvZ25pemUqIHRoZSBpZGVudGl0eSBidXQgaWdub3JlIGl0IChzYXkgaXQncyBh IHRpY2tldA0KPiB0aGF0J3MNCj4gdG9vIG9sZCkNCj4NCj4gV2l0aCB0aGF0IHNhaWQsIEkgdGhp bmsgaXQgd291bGQgcHJvYmFibHkgYmUgc2FmZSB0byBzYXkgeW91IG11c3QgaWdub3JlIGFuDQo+ IGlkZW50aXR5DQo+IHdoZXJlIHRoZSBiaW5kZXIgZG9lc24ndCB2YWxpZGF0ZSwgYnV0IEknZCBs aWtlIHRvIGhlYXIgZnJvbSBjcnlwdG9ncmFwaGVycw0KPiBvbiB0aGlzDQo+IG9uZS4NCj4NCj4g VGhhbmtzLA0KPiAtRWtyDQo+DQo+DQo+IE9uIFdlZCwgRmViIDIxLCAyMDE4IGF0IDY6MjYgQU0s IEh1YmVydCBLYXJpbyA8aGthcmlvQHJlZGhhdC5jb20+IHdyb3RlOg0KPj4NCj4+IE9uIFdlZG5l c2RheSwgMjEgRmVicnVhcnkgMjAxOCAxNToyMTo1OCBDRVQgRXJpYyBSZXNjb3JsYSB3cm90ZToN Cj4+ID4gT24gV2VkLCBGZWIgMjEsIDIwMTggYXQgNjoxMyBBTSwgSHViZXJ0IEthcmlvIDxoa2Fy aW9AcmVkaGF0LmNvbT4gd3JvdGU6DQo+PiA+ID4gT24gRnJpZGF5LCAxNiBGZWJydWFyeSAyMDE4 IDE4OjA2OjQxIENFVCBUaGUgSUVTRyB3cm90ZToNCj4+ID4gPiA+IFRoZSBJRVNHIGhhcyByZWNl aXZlZCBhIHJlcXVlc3QgZnJvbSB0aGUgVHJhbnNwb3J0IExheWVyIFNlY3VyaXR5IFdHDQo+PiA+ ID4NCj4+ID4gPiAodGxzKQ0KPj4gPiA+DQo+PiA+ID4gPiB0byBjb25zaWRlciB0aGUgZm9sbG93 aW5nIGRvY3VtZW50OiAtICdUaGUgVHJhbnNwb3J0IExheWVyIFNlY3VyaXR5DQo+PiA+ID4gPiAo VExTKQ0KPj4gPiA+ID4gUHJvdG9jb2wgVmVyc2lvbiAxLjMnDQo+PiA+ID4gPg0KPj4gPiA+ID4g ICA8ZHJhZnQtaWV0Zi10bHMtdGxzMTMtMjQudHh0PiBhcyBQcm9wb3NlZCBTdGFuZGFyZA0KPj4g PiA+DQo+PiA+ID4gVGhlIGN1cnJlbnQgZHJhZnQgc3RhdGVzIHRoYXQgaWYgdGhlIHNlcnZlciBy ZWNvZ25pc2VzIGFuIGlkZW50aXR5IGJ1dA0KPj4gPiA+IGlzDQo+PiA+ID4gdW5hYmxlIHRvIHZl cmlmeSBjb3JyZXNwb25kaW5nIGJpbmRlciwgaXQgIk1VU1QgYWJvcnQgdGhlIGhhbmRzaGFrZSIN Cj4+ID4NCj4+ID4gV2hpY2ggdGV4dCBhcmUgeW91IHJlZmVycmluZyB0byBoZXJlPw0KPj4NCj4+ IFNlY3Rpb24gNC4yLjExOg0KPj4NCj4+ICAgIFByaW9yIHRvIGFjY2VwdGluZyBQU0sga2V5IGVz dGFibGlzaG1lbnQsIHRoZSBzZXJ2ZXIgTVVTVCB2YWxpZGF0ZQ0KPj4gICAgdGhlIGNvcnJlc3Bv bmRpbmcgYmluZGVyIHZhbHVlIChzZWUgU2VjdGlvbiA0LjIuMTEuMiBiZWxvdykuICBJZiB0aGlz DQo+PiAgICB2YWx1ZSBpcyBub3QgcHJlc2VudCBvciBkb2VzIG5vdCB2YWxpZGF0ZSwgdGhlIHNl cnZlciBNVVNUIGFib3J0IHRoZQ0KPj4gICAgaGFuZHNoYWtlLiAgU2VydmVycyBTSE9VTEQgTk9U IGF0dGVtcHQgdG8gdmFsaWRhdGUgbXVsdGlwbGUgYmluZGVyczsNCj4+ICAgIHJhdGhlciB0aGV5 IFNIT1VMRCBzZWxlY3QgYSBzaW5nbGUgUFNLIGFuZCB2YWxpZGF0ZSBzb2xlbHkgdGhlIGJpbmRl cg0KPj4gICAgdGhhdCBjb3JyZXNwb25kcyB0byB0aGF0IFBTSy4NCj4+DQo+PiA+IC1Fa3INCj4+ ID4NCj4+ID4gYXQgdGhlIHNhbWUgdGltZSwgdGhleSAiU0hPVUxEIHNlbGVjdCBhcyBzaW5nbGUg UFNLIGFuZCB2YWxpZGF0ZSBzb2xlbHkNCj4+ID4gdGhlDQo+PiA+DQo+PiA+ID4gYmluZGVyIHRo YXQgY29ycmVzcG9uZHMgdG8gdGhhdCBQU0siDQo+PiA+ID4gKFBhZ2UgNjAsIGRyYWZ0LWlldGYt dGxzLXRsczEzLTI0KS4NCj4+ID4gPg0KPj4gPiA+IFRoYXQgYWxsb3dzIGZvciB0cml2aWFsIGVu dW1lcmF0aW9uIG9mIGV4dGVybmFsbHkgZXN0YWJsaXNoZWQNCj4+ID4gPiBpZGVudGl0aWVzIC0N Cj4+ID4gPiB0aGUNCj4+ID4gPiBhdHRhY2tlciBqdXN0IG5lZWRzIHRvIHNlbmQgdG8gdGhlIHNl cnZlciBhIGxpc3Qgb2YgaWRlbnRpdHkgZ3Vlc3NlcywNCj4+ID4gPiB3aXRoDQo+PiA+ID4gcmFu ZG9tIGRhdGEgYXMgYmluZGVycywgaWYgdGhlIHNlcnZlciByZWNvZ25pc2VzIGFueSBpZGVudGl0 eSBpdCB3aWxsDQo+PiA+ID4gYWJvcnQNCj4+ID4gPiBjb25uZWN0aW9uLCBpZiBpdCBkb2Vzbid0 LCBpdCB3aWxsIGNvbnRpbnVlIHRvIGEgbm9uLVBTSyBoYW5kc2hha2UuDQo+PiA+ID4NCj4+ID4g PiBCZWhhdmlvdXIgbGlrZSB0aGlzIGlzIGdlbmVyYWxseSBjb25zaWRlcmVkIGEgdnVsbmVyYWJp bGl0eToNCj4+ID4gPiBodHRwczovL2N2ZS5taXRyZS5vcmcvY2dpLWJpbi9jdmVuYW1lLmNnaT9u YW1lPUNWRS0yMDAzLTAxOTANCj4+ID4gPiBodHRwczovL2N2ZS5taXRyZS5vcmcvY2dpLWJpbi9j dmVuYW1lLmNnaT9uYW1lPUNWRS0yMDA2LTUyMjkNCj4+ID4gPg0KPj4gPiA+IEkgd2FzIHdvbmRl cmluZyBpZiB0aGUgZG9jdW1lbnQgc2hvdWxkbid0IHJlY29tbWVuZCBpZ25vcmluZyBhbnkgYW5k DQo+PiA+ID4gYWxsDQo+PiA+ID4gaWRlbnRpdGllcyBmb3Igd2hpY2ggYmluZGVycyBkbyBub3Qg dmVyaWZ5IHRvIHByZXZlbnQgdGhpcyBraW5kIG9mDQo+PiA+ID4gYXR0YWNrLg0KPj4gPiA+IC0t DQo+PiA+ID4gUmVnYXJkcywNCj4+ID4gPiBIdWJlcnQgS2FyaW8NCj4+ID4gPiBTZW5pb3IgUXVh bGl0eSBFbmdpbmVlciwgUUUgQmFzZU9TIFNlY3VyaXR5IHRlYW0NCj4+ID4gPiBXZWI6IHd3dy5j ei5yZWRoYXQuY29tDQo+PiA+ID4gUmVkIEhhdCBDemVjaCBzLnIuby4sIFB1cmt5xYhvdmEgMTE1 LCA2MTIgMDAgIEJybm8sIEN6ZWNoIFJlcHVibGljDQo+PiA+ID4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+ID4gPiBUTFMgbWFpbGluZyBsaXN0DQo+ PiA+ID4gVExTQGlldGYub3JnDQo+PiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby90bHMNCj4+DQo+Pg0KPj4gLS0NCj4+IFJlZ2FyZHMsDQo+PiBIdWJlcnQgS2FyaW8N Cj4+IFNlbmlvciBRdWFsaXR5IEVuZ2luZWVyLCBRRSBCYXNlT1MgU2VjdXJpdHkgdGVhbQ0KPj4g V2ViOiB3d3cuY3oucmVkaGF0LmNvbQ0KPj4gUmVkIEhhdCBDemVjaCBzLnIuby4sIFB1cmt5xYhv dmEgMTE1LCA2MTIgMDAgIEJybm8sIEN6ZWNoIFJlcHVibGljDQo+DQo+DQoNCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpUTFMgbWFpbGluZyBsaXN0DQpU TFNAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vdGxzDQoK RHlzb24gVGVjaG5vbG9neSBMaW1pdGVkLCBjb21wYW55IG51bWJlciAwMTk1OTA5MCwgVGV0YnVy eSBIaWxsLCBNYWxtZXNidXJ5LCBTTjE2IDBSUCwgVUsuClRoaXMgbWVzc2FnZSBpcyBpbnRlbmRl ZCBzb2xlbHkgZm9yIHRoZSBhZGRyZXNzZWUgYW5kIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBp bmZvcm1hdGlvbi4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBtZXNzYWdlIGluIGVycm9yLCBw bGVhc2UgaW1tZWRpYXRlbHkgYW5kIHBlcm1hbmVudGx5IGRlbGV0ZSBpdCwgYW5kIGRvIG5vdCB1 c2UsIGNvcHkgb3IgZGlzY2xvc2UgdGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIG1l c3NhZ2Ugb3IgaW4gYW55IGF0dGFjaG1lbnQuCkR5c29uIG1heSBtb25pdG9yIGVtYWlsIHRyYWZm aWMgZGF0YSBhbmQgY29udGVudCBmb3Igc2VjdXJpdHkgJiB0cmFpbmluZy4K