Re: [TLS] A new consensus call on ALPN vs NPN (was ALPN concerns)

On 12/10/2013 08:46 PM, Hannes Tschofenig wrote:
> 
> On 12/09/2013 03:22 PM, Brian Smith wrote:
>> I think we should re-evaluate whether we
>> still have consensus on moving forward with recommending ALPN as the
>> protocol negotiation mechanism to be used in TLS and specifically in
>> HTTP/2.
> 
> +1
> 
> I was in the room and I recall the discussions. I went to the microphone
> and expressed my excitement about the fact that privacy related topics
> where discussed in the TLS working group (given that privacy wasn't an
> issue previously) and the response was "This has nothing to do with
> privacy.".
> 
> Luckily we know much better now (or at least some people do).

(no hats as usual)

FWIW, I agree with you in general, but in this case the privacy
leak is non-existent if its only HTTP/1.1 vs HTTP/2.0 - since
the binary encoding and lack of head-of-line blocking in the
latter will give that game away anyway.

I'd say focusing on tls1.3 and any privacy gains there is better
than diverting effort to NPN to be honest.

S.

> 
> Ciao
> Hannes
> 
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
> 