Subject: Re: [TLS] New cipher suites for SRP
From: Hubert Kario <[email-masked]>
To: Tom Wu <[email-masked]>
Cc: "[email-masked]" <[email-masked]>, Geoffrey Keating <[email-masked]>
Date: Mon, 29 Jun 2015 15:57:24 +0200
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>

On Monday 29 June 2015 06:55:59 Tom Wu wrote:
> > +1, provided we do two more things:
> > 
> > 
> >  - Change the negotiation so that user name is not exchanged in the clear
> >  - Change key exchange to do PFS
> 
> 
> SRP already provides PFS automatically.

I'm rather fuzzy about the details (I've read the RFC quite a bit ago), but 
isn't the server key share static in SRP?

-- 
Regards,
Hubert Kario
Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic