Re: [TLS] draft-sheffer-tls-bcp: DH recommendations

[Yaron Sheffer <[e-mail]>]

I'm afraid you're ignoring facts here. Both Chrome and Firefox on my 
machine connect to Google using ECDHE by default. Together they make up 
36% of the browser market share [1]. And for both of them, as opposed to 
IE, people tend to use the latest browser versions. To put it bluntly, 
people who are still using IE8 are not the target audience for this draft.

So client-side support, at least, is not an issue.

Thanks,
	Yaron

[1] 
http://thenextweb.com/insider/2013/08/01/ie9-falls-below-10-market-share-firefox-hits-50-month-low-and-chrome-again-gains-the-most/

On 09/19/2013 01:17 PM, Michael Ströder wrote:
> On Thu, 19 Sep 2013 08:50:05 +0000 Peter Gutmann <[e-mail]>
> wrote
>> Yaron Sheffer <[e-mail]> writes:
>>
>>> There are multiple issues with MODP DH in TLS (performance is just one of
>>> them). So I'd like to recommend EC DHE instead - which makes this discussion
>>> moot.
>>
>> There are even more issues with ECC, namely their brittleness, paranoia
>> (whether justified or not) about NSA meddling, and patent issues.  DH is
>> simple in comparison.
>
> I tend to concur with Peter here.
>
> Especially if only the limited param length of MODP DH in current
> implementations rules out its recommendation in the draft.
>
> Ciao, Michael.
>
>
> _______________________________________________
> TLS mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/tls
>