Re: [TLS] OPTLS: Signature-less TLS 1.3

[Martin Thomson <[e-mail]>]

On 3 November 2014 10:00, Peter Gutmann <[e-mail]> wrote:
> See my recent post to the SAAG list where this is also being discussed, this
> hack already doesn't work for some TLS servers and won't work at all in the
> future when the nonce is just 32 random bytes.

Yes, the current TLS 1.3 draft says this:

       opaque                 client_random[32];
       opaque                 server_random[32];

With no mention of times.

Though you can get a similar capability by talking to an HTTPS server
you trust.  Date is a mandatory header field.