Re: [TLS] TLS 1.3 - Support for compression to be removed

[Tony Arcieri <[e-mail]>]

On Thu, Oct 8, 2015 at 9:56 AM, Jeffrey Walton <[e-mail]> wrote:

> On Thu, Oct 8, 2015 at 12:53 AM, Tony Arcieri <[e-mail]> wrote:
> > I think it would be prudent for the chairs to give some sort of judgment
> on
> > this issue, given the high volumes of mailing list traffic created by a
> > small number of detractors despite what is otherwise a rough consensus
>
> That's kind of a loaded request.
>
> We would need to know the security goals and objectives to ensure
> things are progressing as expected. As far as I know, they are not
> stated anywhere.


Jeff,

It's a request against you. You are "spamming" this list.

TLS is a security protocol, not a compression protocol.

Providing secure compression requires application-specific domain
knowledge. TLS cannot provide secure compression.

A security protocol shouldn't provide insecure compression.

TLS can only provide insecure compression, because it lacks the
application-specific domain knowledge to implement security correctly.

TLS is a security protocol.

You are asking TLS, a security protocol, to provide an insecure feature it
is conceptually incapable of providing securely.

Please stop. That is why I asked the chairs to make a ruling and end the
"spam" to the list. This is not a useful discussion.

Your argument is conceptually flawed beyond repair and you are literally
asking for insecure features to be added to a security protocol. This needs
to stop.

Please stop.

-- 
Tony Arcieri