IETF Logo Mail Archive

Re: [TLS] Proposed text for dnsssec chain extension draft

Viktor Dukhovni <ietf-dane@dukhovni.org> Thu, 26 April 2018 16:06 UTC

Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42799126D85 for <tls@ietfa.amsl.com>; Thu, 26 Apr 2018 09:06:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0lqv9gslT9D9 for <tls@ietfa.amsl.com>; Thu, 26 Apr 2018 09:06:47 -0700 (PDT)
Received: from mournblade.imrryr.org (mournblade.imrryr.org [108.5.242.66]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8113B124205 for <tls@ietf.org>; Thu, 26 Apr 2018 09:06:47 -0700 (PDT)
Received: from [192.168.1.161] (straasha.imrryr.org [100.2.39.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mournblade.imrryr.org (Postfix) with ESMTPSA id A8BF37A3309 for <tls@ietf.org>; Thu, 26 Apr 2018 16:06:46 +0000 (UTC) (envelope-from ietf-dane@dukhovni.org)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 11.3 \(3445.6.18\))
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
In-Reply-To: <CABcZeBMgyersPJNU-rCWjF0uGk36Yz87vunz+t9wyyYOk3Z=KA@mail.gmail.com>
Date: Thu, 26 Apr 2018 12:06:45 -0400
Content-Transfer-Encoding: 7bit
Reply-To: TLS WG <tls@ietf.org>
Message-Id: <BE93A96D-8A91-4B0F-A43E-060341E977D2@dukhovni.org>
References: <1D2EB7F1-B796-4459-93C2-443A7104F33A@dukhovni.org> <CABcZeBPNwBKqVLmNR=KqrxhwbxJZPs_-oK26XbK8oq1yRaS8eg@mail.gmail.com> <1EA85624-3A19-4EA3-9A2E-D1DE19414F8C@dukhovni.org> <CABcZeBOauDUGqTz6TCHemonWKEx91NtQmTw8cOfyU1D51+RODQ@mail.gmail.com> <20180426152206.GM25259@localhost> <CABcZeBMgyersPJNU-rCWjF0uGk36Yz87vunz+t9wyyYOk3Z=KA@mail.gmail.com>
To: TLS WG <tls@ietf.org>
X-Mailer: Apple Mail (2.3445.6.18)
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/eZnXyXbsAZZyUQPsj9twe30ad70>
Subject: Re: [TLS] Proposed text for dnsssec chain extension draft
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Apr 2018 16:06:49 -0000


> On Apr 26, 2018, at 11:41 AM, Eric Rescorla <ekr@rtfm.com> wrote:
> 
> This discussion would probably be a lot more productive if you were
> able to have it without accusing other participants of acting in bad
> faith.

[ Well the objections do seem rather hypothetical, and the thing being
  objected to (a 16-bit reserved field) so minimally objectionable, that
  it is   perplexing why it is so important to avoid reaching a compromise
  by   allowing the 2-byte to be added.  Indeed it sure looks like the
  separate document that might define the follow-on extension would
  be strongly opposed in any form by those opposing the reserved 2 bytes,
  but I'd be thrilled to learn of your support in principle for such a
  document, perhaps you'd even be willing to author (or co-author) the
  initial draft? ]

I rather like Paul's point that the lifetime of support for
this extension belongs with this extension.  Adding an extension to
signal ongoing support for another extension rather unnatural.

-- 
	Viktor.

v2.14.0 | Report a Bug | By Email