Re: [TLS] TLS 1.3 process

Peter Gutmann <pgut001@cs.auckland.ac.nz> Sat, 29 March 2014 06:49 UTC

From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: "<tls@ietf.org>" <tls@ietf.org>
Thread-Topic: [TLS] TLS 1.3 process
Thread-Index: Ac9LGstTO2tDjcoISSCDrCseSVscCQ==
Date: Sat, 29 Mar 2014 06:49:26 +0000
Message-ID: <9A043F3CF02CD34C8E74AC1594475C7372395465@uxcn10-6.UoA.auckland.ac.nz>
Accept-Language: en-NZ, en-GB, en-US
Content-Language: en-NZ
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/dwpPajUShQfi92ncrv_Sw5IGmvo
Subject: Re: [TLS] TLS 1.3 process
Precedence: list

Adam Langley <agl@imperialviolet.org> writes:

>I would rather like to see a TLS 1.3 that is a tidying up of 1.2: merging the
>various RFCs into one, editing and pulling in some of the drafts that are
>floating around. The more significant changes could be 1.4.

Absolutely!  I don't want to have to add yet another parallel implementation
of a protocol that's just different enough that it's yet another set of code
and functionality to test, alongside SSLv3, TLS 1.0, and TLS 1.2.  All of the
previous updates have been compatible enough that you don't want to do a new
implementation, but incompatible enough that it's a different protocol.  Make
1.3 purely fixes for 1.2 and then start again with 2.0 so we can ditch all the
old baggage, complexity, and attack surface.

Peter.

[TLS] TLS 1.3 process Sean Turner
Re: [TLS] TLS 1.3 process Trevor Perrin
Re: [TLS] TLS 1.3 process Martin Thomson
Re: [TLS] TLS 1.3 process Trevor Perrin
Re: [TLS] TLS 1.3 process Nikos Mavrogiannopoulos
Re: [TLS] TLS 1.3 process Douglas Stebila
Re: [TLS] TLS 1.3 process Watson Ladd
Re: [TLS] TLS 1.3 process Salz, Rich
Re: [TLS] TLS 1.3 process Peter Gutmann
Re: [TLS] TLS 1.3 process t.petch
Re: [TLS] TLS 1.3 process Stephen Farrell
Re: [TLS] TLS 1.3 process Nikos Mavrogiannopoulos
Re: [TLS] TLS 1.3 process Dan Harkins
Re: [TLS] TLS 1.3 process Salz, Rich
Re: [TLS] TLS 1.3 process Watson Ladd
Re: [TLS] TLS 1.3 process Adam Langley
Re: [TLS] TLS 1.3 process Nikos Mavrogiannopoulos
Re: [TLS] TLS 1.3 process Eric Rescorla
Re: [TLS] TLS 1.3 process Watson Ladd
Re: [TLS] TLS 1.3 process Eric Rescorla
Re: [TLS] TLS 1.3 process Trevor Perrin
Re: [TLS] TLS 1.3 process Bill Frantz
Re: [TLS] TLS 1.3 process Dan Harkins
Re: [TLS] TLS 1.3 process Bill Frantz
Re: [TLS] TLS 1.3 process Dan Harkins
Re: [TLS] TLS 1.3 process Salz, Rich
Re: [TLS] TLS 1.3 process Bill Frantz
Re: [TLS] TLS 1.3 process Peter Gutmann
Re: [TLS] TLS 1.3 process Peter Gutmann
Re: [TLS] TLS 1.3 process Peter Gutmann
Re: [TLS] TLS 1.3 process Peter Gutmann
Re: [TLS] TLS 1.3 process Dan Harkins
Re: [TLS] TLS 1.3 process Watson Ladd
Re: [TLS] TLS 1.3 process Dan Harkins
Re: [TLS] TLS 1.3 process Andy Lutomirski
Re: [TLS] TLS 1.3 process henry.story@bblfish.net
Re: [TLS] TLS 1.3 process Peter Gutmann