Re: [TLS] Version negotiation (was: Thoughts on TLS 1.3 cryptography performance)

Eric Rescorla <ekr@rtfm.com> Thu, 13 March 2014 01:48 UTC

MIME-Version: 1.0
In-Reply-To: <53210CE4.30003@pobox.com>
References: <CACsn0ckbrrt0rBsHM+5A_jNK6UvkaiO9mHx6=Jr+jjqy+bZ6MQ@mail.gmail.com> <53210CE4.30003@pobox.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 12 Mar 2014 18:48:09 -0700
Message-ID: <CABcZeBM0dbeD4pY=D8sPuCQ25B1dyH5A46dt054shQXmwdrdxQ@mail.gmail.com>
To: Michael D'Errico <mike-list@pobox.com>
Content-Type: multipart/alternative; boundary="f46d041826c697c56c04f47327a1"
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/gDivOb04cTKaOYhy2DX2Wp8vXFU
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Version negotiation (was: Thoughts on TLS 1.3 cryptography performance)
Precedence: list

On Wed, Mar 12, 2014 at 6:41 PM, Michael D'Errico <mike-list@pobox.com>wrote:

> Watson Ladd wrote:
>
>> Dear all,
>> Below are some thoughts about the TLS 1.3 cryptography....
>>
>
> Is the plan to send client version { 0x03 0x04 } and continue to be
> subject to downgrade attacks,

Well, we need to address the downgrade attack problem in any case,
and so I was assuming any solution that worked for TLS 1.2 would
work for 1.3.

version intolerance, etc. that plague
> browsers today?  Or is there some other way to signify support for
> version 1.3?
>

It seems to me that using the existing version selection mechanism is
the default choice, but certainly this is something that in principle
the WG could decide to change.

-Ekr

Mike
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>

[TLS] Thoughts on TLS 1.3 cryptography performance Watson Ladd
[TLS] Version negotiation (was: Thoughts on TLS 1… Michael D'Errico
Re: [TLS] Version negotiation (was: Thoughts on T… Eric Rescorla
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Santosh Chokhani
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Watson Ladd
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Nico Williams
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Watson Ladd
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Nico Williams
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Trevor Perrin
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Nico Williams
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Eric Rescorla
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Nico Williams
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Trevor Perrin
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Watson Ladd
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Trevor Perrin
Re: [TLS] Thoughts on TLS 1.3 cryptography perfor… Eric Rescorla