Re: [TLS] (draft final) ITU Q3/16 Liaison Response

On Fri, Jan 23, 2015 at 9:13 AM, Watson Ladd <watsonbladd@gmail.com> wrote:

> I do not understand A2. There are three possible antecedents for they,
> and it is not clear which two are the same. Is a DTLS association a
> DTLS connection, or is it a DTLS session? Or are DTLS sessions and
> associations the same?
>
>
[Joe] Good catch. It should say that associations are the same as TLS
connections.

> A3 needs to be substantially fleshed out: given that sessions are
> cryptographic states, doesn't every renegotiation involve a new
> session? (I understood the intended answer is that the same connection
> changes which session it is a part of, but that session may not be new
> as it may be resumed.) A4 does better at this.
>
>
[Joe] Maybe we should just use the text in A4 as the response to both Q3
and Q4.

A3 and A4:

Resumption refers to the use of the state from an existing TLS session to
establish a new TLS connection using an abbreviated handshake.  During
resumption the cryptographic parameters (algorithms etc.) remain the same.
TLS renegotiation is the process of executing a new TLS handshake to
establish new cryptographic parameters for a TLS connection (effectively a
new TLS connection using the same host addresses and ports as the previous
one).  If the handshake is a full handshake then both a new session and a
new connection are established and the renegotiated session may have
different parameters.

Please note that session resumption and renegotiation are optional
features.  Session resumption is very likely to be changed in TLS 1.3,
which is work in progress at this time

> On Fri, Jan 23, 2015 at 8:30 AM, Paul Hoffman <paul.hoffman@vpnc.org>
> wrote:
> > These look good. However, it may be premature to say "renegotiation is
> being dropped in TLS 1.3" since we are far from finishing TLS 1.3. Maybe
> change this to "renegotiation is likely to be dropped in TLS 1.3".
> Similarly, it might be good to add at the end of A4: "Resumption is very
> likely to be changed in TLS 1.3, which is work in progress at this time".
> >
> > --Paul Hoffman
> >
> > _______________________________________________
> > TLS mailing list
> > TLS@ietf.org
> > https://www.ietf.org/mailman/listinfo/tls
>
>
>
> --
> "Those who would give up Essential Liberty to purchase a little
> Temporary Safety deserve neither  Liberty nor Safety."
> -- Benjamin Franklin
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>