Re: [TLS] Way to go everybody! TLS FTW!

Matt McCutchen <matt@mattmccutchen.net> Fri, 07 January 2011 17:45 UTC

Return-Path: <matt@mattmccutchen.net>
X-Original-To: tls@core3.amsl.com
Delivered-To: tls@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 63F0E3A68D5 for <tls@core3.amsl.com>; Fri, 7 Jan 2011 09:45:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4sjRO3tU76jq for <tls@core3.amsl.com>; Fri, 7 Jan 2011 09:45:14 -0800 (PST)
Received: from homiemail-a62.g.dreamhost.com (mx1.spunky.mail.dreamhost.com [208.97.132.47]) by core3.amsl.com (Postfix) with ESMTP id 763F03A67D0 for <tls@ietf.org>; Fri, 7 Jan 2011 09:45:14 -0800 (PST)
Received: from homiemail-a62.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a62.g.dreamhost.com (Postfix) with ESMTP id 4E0A7634073 for <tls@ietf.org>; Fri, 7 Jan 2011 09:47:21 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=mattmccutchen.net; h=subject:from :to:in-reply-to:references:content-type:date:message-id :mime-version:content-transfer-encoding; q=dns; s= mattmccutchen.net; b=CleYo6j4apVXdjVI69bDZWUMCocBpKmfLJ6fdJuezc+ OGA6OO5G00xxvEBm8pXZOb0Aro9vt8FiRIfvLHoqokJseZHmLxavoTJ+q9eE7WLG Dni81CW7VZOc339hwYbPteOSC9nDRyT4o98hXSMAQ+gK4xotGuyCPpD4EeMYvysA =
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=mattmccutchen.net; h= subject:from:to:in-reply-to:references:content-type:date :message-id:mime-version:content-transfer-encoding; s= mattmccutchen.net; bh=DnhS2clETaLAx93HZShylLgjcrU=; b=QkZu8AuIw5 tP+yF5aUh/pSSTGIFxt2Wx5e2/NTwtOhJfOMvaMMxsZbot3gYOh8cStt1EPbhFDb bOjPhFwxlH1JhQ5ywjyNOw10+XGOZsNtqkRXgOGysIBLDDJTkwEBTF3H2lt9VXg6 12ga0QIZCuZIwF83BMm2cwCRhzmtaOP4E=
Received: from [192.168.1.40] (pool-74-96-127-122.washdc.east.verizon.net [74.96.127.122]) (Authenticated sender: matt@mattmccutchen.net) by homiemail-a62.g.dreamhost.com (Postfix) with ESMTPA id E851163406C for <tls@ietf.org>; Fri, 7 Jan 2011 09:47:20 -0800 (PST)
From: Matt McCutchen <matt@mattmccutchen.net>
To: tls@ietf.org
In-Reply-To: <1281516049.16678.89.camel@mattlaptop2.local>
References: <4C619C03.3060809@extendedsubset.com> <1281516049.16678.89.camel@mattlaptop2.local>
Content-Type: text/plain; charset="UTF-8"
Date: Fri, 07 Jan 2011 12:47:19 -0500
Message-ID: <1294422439.1953.20.camel@mattlaptop2.local>
Mime-Version: 1.0
X-Mailer: Evolution 2.32.2
Content-Transfer-Encoding: 7bit
Subject: Re: [TLS] Way to go everybody! TLS FTW!
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Jan 2011 17:45:15 -0000

On Wed, 2010-08-11 at 01:40 -0700, Matt McCutchen wrote:
> On Tue, 2010-08-10 at 13:35 -0500, Marsh Ray wrote: 
> > Today, this "Patch Tuesday", Microsoft releases KB980436 which adds 
> > support for RFC 5746 the Renegotiation Indication Extension
> > http://www.microsoft.com/technet/security/bulletin/ms10-049.mspx
> > This is a major accomplishment, Microsoft clearly has as many affected 
> > products and systems as anybody. Although they may be bringing up the 
> > rear among the vendors, the rear has clearly been brought up.
> 
> No, alas, Debian still has OpenSSL with RFC 5746 available only in
> testing:
> 
> http://packages.debian.org/search?keywords=openssl&searchon=sourcenames&exact=1&suite=all&section=all

A DreamHost support technician has just pointed out to me that Debian
has released openssl 0.9.8g-15+lenny10 with RFC 5746 support to stable.
Hooray!

-- 
Matt