Re: [TLS] TLS 1.3 draft-07 sneak peek

[Ilari Liusvaara <[e-mail]>]

On Tue, Jun 30, 2015 at 09:31:19PM -0400, Dave Garrett wrote:
> On Tuesday, June 30, 2015 06:23:18 pm Eric Rescorla wrote:
> > 2. Should we require that PSK cipher suites where the PSK is used for
> > resumption use compatible ciphers?
> 
> The "suitable PSK cipher suite" & "resumption use compatible ciphers"
> issues would be simpler if the NewSessionTicket was just bound to a
> specified cipher suite (or vector of suites, but that's probably not
> needed). We could just add a cipher suite field here so the server
> tells the client exactly what it expects.

Except since actual PSKs presumably don't have such restrictions (any
supported ciphersuite ok), any games with ciphersuites the server
plays would be specific to resumption.

I don't see anything wrong with session being resumed with different
ciphersuite in 1.3 (in 1.2 things worked differently, there there
actually might have been problems if ciphersuite changed).


-Ilari