[TLS] TLS 1.2 draft

I've just submitted a revised draft-ietf-tls-rfc4346bis-03.

Until it shows up, you can find a copy at:
https://svn.resiprocate.org/rep/ietf-drafts/ekr/tls/tls.txt

Here's a list of the major changes in this version. I'll
post a list of the few remaining open issues soon.

-Ekr

   [RFC Editor: Please delete this]

     - Forbid decryption_failed [issue 5]

     - Fix CertHashTypes declaration [issue 20]

     - Fix client_version in 7.4.1.2 [issue 19]

     - Require Bleichenbacher and timing attack protection [issues 17
   and
     12].

     - Merged RFC-editor changes back in.

     - Editorial changes from NIST [issue 8]

     - Clarified the meaning of HelloRequest [issue 39]

     - Editorial nits from Peter Williams [issue 35]

     - Made maximum fragment size a MUST [issue 9]

     - Clarified that resumption is not mandatory and servers may
     refuse [issue 37]

     - Fixed identifier for cert_hash_types [issue 38]

     - Forbid sending unknown record types [issue 11]

     - Clarify that DH parameters and other integers are unsigned [issue
   28]

     - Clarify when a server Certificate is sent [isssue 29]

     - Prohibit zero-length fragments [issue 10]

     - Fix reference for DES/3DES [issue 18]

     - Clean up some notes on deprecated alerts [issue 6]

     - Remove ephemeral RSA [issue 3]

     - Stripped out discussion of how to generate the IV and replaced it
   with a randomness/unpredictability requirement [issue 7]

     - Replaced the PKCS#1 text with references to PKCS#1 v2. This also
   includes DigestInfo encoding [issues 1 and 22]

     - Removed extension definitions and merged the ExtendedHello
   definitions [issues 31 and 32]

     - Replaced CipherSpec references with SecurityParameters references
   [issue 2]

     - Cleaned up IANA text [issues 33 and 34]

     - Cleaned up backward compatibility text [issue 25]

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls