Re: [TLS] (draft final) ITU Q3/16 Liaison Response

I do not understand A2. There are three possible antecedents for they,
and it is not clear which two are the same. Is a DTLS association a
DTLS connection, or is it a DTLS session? Or are DTLS sessions and
associations the same?

A3 needs to be substantially fleshed out: given that sessions are
cryptographic states, doesn't every renegotiation involve a new
session? (I understood the intended answer is that the same connection
changes which session it is a part of, but that session may not be new
as it may be resumed.) A4 does better at this.

On Fri, Jan 23, 2015 at 8:30 AM, Paul Hoffman <paul.hoffman@vpnc.org> wrote:
> These look good. However, it may be premature to say "renegotiation is being dropped in TLS 1.3" since we are far from finishing TLS 1.3. Maybe change this to "renegotiation is likely to be dropped in TLS 1.3". Similarly, it might be good to add at the end of A4: "Resumption is very likely to be changed in TLS 1.3, which is work in progress at this time".
>
> --Paul Hoffman
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls

-- 
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin