IETF Logo Mail Archive

Re: [TLS] [EXTERNAL] Re: Call for adoption of draft-thomson-tls-keylogfile

Andrei Popov <Andrei.Popov@microsoft.com> Mon, 28 November 2022 23:13 UTC

Return-Path: <Andrei.Popov@microsoft.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8AA2C152704 for <tls@ietfa.amsl.com>; Mon, 28 Nov 2022 15:13:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.101
X-Spam-Level:
X-Spam-Status: No, score=-7.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EG4gXV76biwk for <tls@ietfa.amsl.com>; Mon, 28 Nov 2022 15:13:15 -0800 (PST)
Received: from BN6PR00CU002-vft-obe.outbound.protection.outlook.com (mail-eastus2azlp170110002.outbound.protection.outlook.com [IPv6:2a01:111:f403:c110::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D30F9C14CF03 for <tls@ietf.org>; Mon, 28 Nov 2022 15:13:15 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WRT5ZW4FXa7PtMTcf5KMiyC1wGjVNGLzDs27I2/1nB5htRe/BCQttlHAPmCWZGNmOZZMFwa7mBneMavSRkYVqv6gx1cuMKEU6a6+ClSgz91gOOoJXAxu7eHX/BA/vHrEbVRvRC52E3pyQ+Vd//dKICFM2U6pwrM920BmxvC8LS/t1ckfbi2yXYYQK6839W1TeVXMi8n5llt3zeE/evjgPSw1nJmUapzYvPmu6rOJYjnBny+6KkrrIFHbrqnJp5JHkzjxq3QJABQhLYdkD1nBBNay57VOmpTUTUCmLSn13sT1e6ukmLxgiMAXayUI5Q8QcQoiHJI6kW6SGzIsw1AnVA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=w1p1+RWAwgkhZBK6goY2UlTuHL2cf32WkT9d0ftA6Vk=; b=mmorED8ddM1D43kWdoDtnSS4PEhmKfWqMF0b7xqo8ug4y3VsV/wmRtKXptr8UN6xd+mhEv2Mc9voV/MNsA37AjEgb9CSyztF1NXCMD8T8TTeIXi9TLnUldl+57MN8U5oZS5mW9GafKYIo69+2TQQdQiYd0k6jzdB56nY1S4iL6mbeRZj37DqN+5YYmF/jtu2hR5SdQw4CXXK0d5lyMOiBAzR6pz0nCWQwdyt6DvtHTMfZL9rANFmxlYd//xzw8Qeh2Md2LqBWo3NljN6QRV4ViJWSI7sdSlAgCQQ6ZcHFSH3qkn1QrjbDaxMFQA6OxfOKdDNTH6xcvSQG1I6mkUfnQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w1p1+RWAwgkhZBK6goY2UlTuHL2cf32WkT9d0ftA6Vk=; b=V9nJoWztUSyncTHDjkyjTAUbWbJjTeJQLkBsFJch4r/8l/dJUHvQhnnwlQj6stID81u4kjSH0Yu9rCP+o6Rt5T1XM9V+4wxbjGaFehE/F7R5FOAnv3zybd4KkaelzXV1bCksv1yNIngQYNUO8x7UQ1zyywFHqwg86EiQGtRcsqo=
Received: from BY5PR00MB0675.namprd00.prod.outlook.com (2603:10b6:a03:208::8) by SA1PR00MB1137.namprd00.prod.outlook.com (2603:10b6:806:1ac::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5914.0; Mon, 28 Nov 2022 23:13:10 +0000
Received: from BY5PR00MB0675.namprd00.prod.outlook.com ([fe80::b1e3:80e7:3451:8397]) by BY5PR00MB0675.namprd00.prod.outlook.com ([fe80::b1e3:80e7:3451:8397%3]) with mapi id 15.20.5914.000; Mon, 28 Nov 2022 23:13:10 +0000
From: Andrei Popov <Andrei.Popov@microsoft.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Sean Turner <sean@sn3rd.com>, TLS List <tls@ietf.org>
Thread-Topic: [EXTERNAL] Re: [TLS] Call for adoption of draft-thomson-tls-keylogfile
Thread-Index: AQHZA3e2HDziCpxlLUy3FQvCDvqP+a5U9q0w
Date: Mon, 28 Nov 2022 23:13:10 +0000
Message-ID: <BY5PR00MB067518FBA034A4F0B16E75FB8C139@BY5PR00MB0675.namprd00.prod.outlook.com>
References: <15D5BB25-508F-42E3-B843-BCB81B668355@sn3rd.com> <7e32f5d6-e425-adde-dc88-02c4b220f3ea@cs.tcd.ie>
In-Reply-To: <7e32f5d6-e425-adde-dc88-02c4b220f3ea@cs.tcd.ie>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=fcc7b0ab-f9fa-4b62-b0a2-b06b5965b876; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2022-11-28T23:11:54Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=microsoft.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BY5PR00MB0675:EE_|SA1PR00MB1137:EE_
x-ms-office365-filtering-correlation-id: be36431b-493e-43ff-4ada-08dad1961df0
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR00MB0675.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230022)(4636009)(396003)(376002)(346002)(136003)(39860400002)(366004)(451199015)(82960400001)(55016003)(38070700005)(33656002)(82950400001)(86362001)(316002)(296002)(10290500003)(110136005)(478600001)(2906002)(4744005)(66946007)(66476007)(66556008)(8990500004)(66446008)(64756008)(76116006)(8676002)(41300700001)(8936002)(5660300002)(52536014)(71200400001)(83380400001)(38100700002)(9686003)(122000001)(7696005)(6506007)(53546011)(26005)(186003); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: nJyHtv/ZBLdHoIIXFgL5HwFJ7nGMVUtGGdo17S75YS3e0olJCwjiDyxXjvgRJtPSZzS6+lVIl4Kc8lAb46tlZOSmd2QNFoxoP061ZUlcj5htkHBbz/K75rfWll66f86x0AcA+wRxQTqxIbta4X1ULGMxQaaELKAyK3LfGLk6fxIXZPeyeq5eXxiN0oZ4CyeAItbSAJS4BnVmOrMsynGCYkJJ0NLe84PyCTcN9lWXYTUnQJ6haUUE7uiXQa0uDgLKBJ9+OxEj4rQ8jynHT5oNga/9R/XEtC3MFceAkbAfAaZxMoJ2OSCdsRdXBnyvFvo3a3Fh9VAUB1vH9H8qJwNCSlSNf2v8kvVNJc/TkZqLD7bfgX3vDJ18UnqDB1xf+wCO2k90FGrpyW5uf4ypO4jgGPFPNA+Pjt1zbehIRM7bt84Ja/Q+ftf5NN5Xv3tB1lfIYByjiYjereOt/w9F56YtYPkHDXQHQz5Sp6k+iVwvdyrJDkgfkenQ8qhP8o8aGvNxZ22jWaPMtdywhCpWE8cUQgJkubEiZGzE0LgEcMzxUfSva+1ZnmifZh3fahXQd/6sKgL04f89e8PV/nZ6TzTInmmNQruY6z/hiyUzC8mgH4lNnu8Y1pxxk2/z6WZeYYCPXUyQvMc0IM2BVuWb78/PZsmVciUgRxRXzgdP6SAO3Lhfr4g59wEApOW00JJ5uRc7tVoLaV39oNltSr26mMCgTnyggxLyRjlQJVqqpJJMmXokUkakV1LgDsV6T+LFhq/3sBMzJtCCaRE2OhSslHaerjLvdqgfWiaGcV4UDra9dH5E4+JHx8DtJcL5143zuundkfuHmbg4IMJmkF0L7cu9U8VKonZd+t2qJe7E/wjMZlBimKKmZCBUQiV56RtvUPnciPTrkkD4IXHjiXWdF9+DgGEmxljoUXbDa1t51RUaJGDE9WrmSdZOSKJiESnTXSnYfrNdv+dS5XoJB/iVu8bwD/Sa8HVPRhzDW+vZ5dk7mQMVTlYj+6cqNzBgRgWBXhZ6JsbO35YFL+EFZWxDGjb8wHZv6hILTtQF+YMiTOgnCNMRDpWlbjZMdUlXxnripxI1i0V3iHlrMo7xpLnbUjsPyTxYOihLC7p81Jx1zo4txfPNzt7Jyb2jt5q/HTaBKL9p4WGG3MRzj2VAmU5yN5LZ9cvOfMfdqVRhFcJ6ljWt74x68+WncwFjSqE2YSxvcH+uamQUxAXyTTm9cREDa8lBNS8BI9LJKXkUfEFfCoimgwg+6ifLIh3y8oCJ55Xb2kjsKaECL66wOtm6KmzqmlwS2K79MkakhhIFirGithF4EGgciXjZGhzp57ertZ1ajyMpJ5D2UasvrTzjYEuAPnK32/yLVoedSU5aXreSmcaXonR0Ol39APjmLHDamQ7gK1XlQ15b+5RPxGYdQl9rhPyB6MLOzUlBj/eC9gn7EjvNMUZ/boTGvwDPE0+95inKQGqGPWGunIAQO5YmeAgYaBWA7xuAHRHa7aapbSnEhCMV/9sYy2TLisB7oy5H4ppzgky60t9PJDhBfx7PZxSJr9Gt0kAscnGOe+9obtJWJfkvH4ENEWp4KITKShIXgTGf7p50
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR00MB0675.namprd00.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: be36431b-493e-43ff-4ada-08dad1961df0
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Nov 2022 23:13:10.3530 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: sY3/VgsALY9EM2bJmlvBCsObcDFRHSARh0sUcQ2yOongEEz5BlYGAdv7D9PpS8c/3f13OYnAgfY8IBq7oySWkA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR00MB1137
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/a_ArOucLNhAF7259XnpomFEj5AU>
Subject: Re: [TLS] [EXTERNAL] Re: Call for adoption of draft-thomson-tls-keylogfile
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Nov 2022 23:13:18 -0000

> If there were some technical means to ensure that this was less likely to be abused, I'd like it more.
Perhaps require key update prior to secrets export😊

-----Original Message-----
From: TLS <tls-bounces@ietf.org> On Behalf Of Stephen Farrell
Sent: Monday, November 28, 2022 2:20 PM
To: Sean Turner <sean@sn3rd.com>; TLS List <tls@ietf.org>
Subject: [EXTERNAL] Re: [TLS] Call for adoption of draft-thomson-tls-keylogfile


I'm ok with adoption so long as we include sufficient caveats along the way (and then add more caveats just in case:-)

If there were some technical means to ensure that this was less likely to be abused, I'd like it more. (Could we e.g. require inclusion of a TLS extension that has a 100kB cat-picture payload?)

S.

v2.23.0 | Report a Bug | By Email