IETF Logo Mail Archive

Re: [TLS] I-D Action: draft-ietf-tls-8773bis-01.txt

"Owen Friel (ofriel)" <ofriel@cisco.com> Tue, 09 January 2024 15:24 UTC

Return-Path: <ofriel@cisco.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61715C15153E for <tls@ietfa.amsl.com>; Tue, 9 Jan 2024 07:24:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.905
X-Spam-Level:
X-Spam-Status: No, score=-11.905 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MV4gbcXOUOXi for <tls@ietfa.amsl.com>; Tue, 9 Jan 2024 07:24:20 -0800 (PST)
Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E9C7C14F5FB for <tls@ietf.org>; Tue, 9 Jan 2024 07:24:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=1931; q=dns/txt; s=iport; t=1704813860; x=1706023460; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=UKCx9rVhvbv/fIyzqVgPya2hpGae6CfdaR5+NFuEuQE=; b=eB2lQs3mPZZ/ppUE7k5ZO4tF4m+fBOvVizKJGeNZSSbhTbJEsBEbxyDQ 5XZDzs6iC1TdfVJhYbcg2NPNFN8taXJg1yXxltMsUVnDX3ugHj9XARisq IPOTCfEnK1YmYEzljse/rSAjk/SEdpgJjqTYNaNm7SWeH3zuXsJhaQrm3 o=;
X-CSE-ConnectionGUID: zn+lR/K1S8+IjHXa1FRP/A==
X-CSE-MsgGUID: 8oqtLhZCTqSUKMQ+Cu64uw==
X-IPAS-Result: A0BMAQBYZJ1lmJ1dJa1aHgEBCxIMQCWBHwuBZ1J6AoEFEkiIHgOFLYZFgiIDl2qBOIRfFIFqDwEBAQ0BAS4NCQQBAYUGAoc5AiY0CQ4BAgQBAQEBAwIDAQEBAQEBAQEGAQEFAQEBAgEHBRQBAQEBAQEBAR4ZBQ4QJ4VsAQyGRQEBAQEDAQEQKDQXBAIBCBEEAQEfECYLHQgCBBMIGoJeAYJfAwEQqUgBgUACiih4gTSBAYIWBYE8AhBBsGYGgUiEZ4M0AYVlggqCMycbgUlEgVeCaD6CYQEBAgEXgSwchBKCLwSBGIRBkABSfx0DXSgEXA8FFg8eNxEQEw0DCG4dAjE8AwUDBDIKEgwLIQUTQgNABkkLAwIaBQMDBIEwBQ0aAhAaBgwmAwMSSQIQFAM7AwMGAwoxAzBVQgxQA2UfMgk8DwwaAhseDScjAixAAxEFEAIWAyQWBDQRCQsoAywGOAISDAYGCV0mFgkEJQMIBANUAyN0EQMECgMUBwsHfVADRB1AAwttPTUUGwUEgTYFlAUCAYE7RDZlBEMOAhRGAT2BFA88ohSidAqEEYwFlUQXqSpkmE0gjUqVC4VIAgQCBAUCDgEBBoFjOoFbcBUaIYJnUhkPjjmIc4pldgI5AgcLAQEDCYpnAQE
IronPort-PHdr: A9a23:b+kdMBNHhL7H71bnCRUl6nfNWUAX0o4cdiYP4ZYhzrVWfbvmo9LpP VfU4rNmi1qaFYnY6vcRk+PNqOigQm0P55+drWoPOIJBTR4LiMga3kQgDceJBFe9LavCZC0hF 8MEX1hgrDmgKUYAIM/lfBXJp2GqqzsbGxHxLw1wc+P7AI/fi+y81vu5/NvYZAAbzDa4aKl5e Q2/th6Z9tFDm4ZgJ60tghfIuS5OfOJbhCtkcFmShB37oMy3+fZe
IronPort-Data: A9a23://y6wqKJadSoG6yhFE+RoZUlxSXFcZb7ZxGr2PjKsXjdYENS3jcEy TNJCGDQOKyIY2enL4x0YN/noUMC7Z/WxtdiTgcd+CA2RRqmiyZq6fd1j6vUF3nPRiEWZBs/t 63yUvGZcYZsCCea/0/xWlTYhSEU/bmSQbbhA/LzNCl0RAt1IA8skhsLd9QR2uaEuvDnRVvR0 T/Oi5eHYgP9gmYlajl8B5+r8XuDgtyj4Fv0gXRmDRx7lAe2v2UYCpsZOZawIxPQKmWDNrfnL wpr5OjRElLxp3/BOPv8+lrIWhFirorpAOS7oiE+t55OLfR1jndaPq4TbJLwYKrM4tmDt4gZJ N5l7fRcReq1V0HBsLx1bvVWL81xFb9Au7v9ZlvmipzQ7k/mQ3K17c9WS2hjaOX0+s4vaY1P3 eYTJDZIZReZiqfohrm6UeJrwM8kKaEHPqtG5Somlm6fXK1gGM2cK0nJzYcwMDMYgc5UHPvaT 8EYcjFoKh/HZnWjP39OVspmwbb02ieXnztw+FWMuY430UPv1TdM853Uc/HIJICXWpAA9qqfj jmbpzuiWE5y2Mak4SaB6Vqti/PB2yThV+ov+KaQ7PVmhhiYwXYeTUNQXlqgqv7/gUm7Mz5CF 6AK0jgo7qwIs2/ydYm+fh+YkHfdkCQkHPMFRoXW9zqx4qbT5g+YAE0NQThAdMEquacKqdoCi w/hczTBW2QHjVGFdU9x4It4ut9bBMT4BXUJaSlBRgwf7py95ooylRnICN1kFcZZb+EZ+xmun VhmTwBn293/aPLnMY3grTgrZBrw/vD0ovYdvFm/Y45cxloRiHSZT4Kp80PHyv1LMZyUSFKM1 FBdxJDCtbFUVs/TznTXKAnoIF1Pz6vUWNE7qQA2d6TNCxz8k5JeVdkJv2EgfhsB3jgsI2W1P yc/Rj+9FLcIYSP1NvUoC25AI88r1qPnXc/0TezZa8EGY556Mme6ENJGOyatM5TWuBF0y8kXY M7DGe71VCpyIfo8llKeGbxCuYLHMwhjnws/s7ihkUT+uVdfDVbIIYo43KymMbxlsf3f+FqEm zudXuPToyhivCTFSnC/2aYYLEsBKj4wApWeliCdXrfrztZOcI35N8Ls/A==
IronPort-HdrOrdr: A9a23:KyAgTqoXWRR/U0PcdXC/q6kaV5tjLNV00zEX/kB9WHVpm5Oj5q OTdaUgtSMc1gxxZJh5o6H+BEDhex/hHO1OkPcs1NCZLUXbUQqTXcxfBOTZskbd8kHFh4pgPO JbAtRD4b7LfBdHZKTBkXOF+r8bqbHtntHL9ILjJjVWPHxXgspbnmFE43OgYzVLrX59dOME/f Snl616jgvlU046Ku68AX4IVfXCodrkqLLKCCRtOzcXrCO1oXeN8rDVLzi0ty1yb9pI+9gf2F mAtza8yrSosvm9xBOZ/XTU9Y5qlNzozcYGLNCQi+AOQw+cyzqAVcBEYfmvrTo1qOag5BIBi9 /XuSotOMx19jf4Yny1mx3wwAPtuQxeq0MKiGXowkcLk/aJAQ7SOPAxwb6xtSGprHbIiesMkp 6jGVjp8aa/QymwxRgVrOK4Ji2C3nDE0UbK19RjwUC2leAlGeRsRUt1xjIMLL4QWC3984wpC+ 9oEYXV4+tXa0qTazTDsnBo28HEZAV6Iv6qeDl1hiWu6UkeoFlpi08DgMAPlHYJ85wwD5FC+u TfK6xt0LVDVNUfY65xDPoIBZLfMB2GfTvcdGaJZVj3HqAOPHzA75bx/bUu/emvPJgF1oE7lp jNWE5R8WQyZ0XtA8uT24AjyGGHfEytGTD2js1O7ZlwvbPxALLtLC2YUVgr19Ctpv0Oa/erLM pb+Kgmd8MLAVGebLqhhTeOKKW6AUNuIvEohg==
X-Talos-CUID: 9a23:tfGsZWiVmQTGv7zgvD+XUHvFUTJuYHueyE2XABaDWSVISp2lQAa+wpsjup87
X-Talos-MUID: 9a23:8VSz+gaHfsFRQeBT5zj1mBViBuxU+p+TK2U00r4b5ZWZKnkl
X-IronPort-Anti-Spam-Filtered: true
Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-8.cisco.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 09 Jan 2024 15:24:19 +0000
Received: from rcdn-opgw-4.cisco.com (rcdn-opgw-4.cisco.com [72.163.7.165]) by rcdn-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id 409FOJb0002885 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for <tls@ietf.org>; Tue, 9 Jan 2024 15:24:19 GMT
X-CSE-ConnectionGUID: 8+e2q7/TTL25jVsgcxhlNw==
X-CSE-MsgGUID: QvFT4xcdRueq4+WkycUrZA==
Authentication-Results: rcdn-opgw-4.cisco.com; dkim=pass (signature verified) header.i=@cisco.com; spf=Pass smtp.mailfrom=ofriel@cisco.com; dmarc=pass (p=reject dis=none) d=cisco.com
X-IronPort-AV: E=Sophos;i="6.04,183,1695686400"; d="scan'208";a="23541483"
Received: from mail-bn7nam10lp2101.outbound.protection.outlook.com (HELO NAM10-BN7-obe.outbound.protection.outlook.com) ([104.47.70.101]) by rcdn-opgw-4.cisco.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 09 Jan 2024 15:24:18 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZyzT/2goNBZ7408jDnRhERHYz0Xj6KEdL1damdJtvreyqsDclwdjayfYFc2IuLmD/jJsTv1BN6kuWjYAU9GNlqT6CaliqjY9SnYQpgsZtQc0ypieowUo1cjkOqrpjzp9uxU+f86ZX8V1mfVnQyaIIrh/Pi2D8XCRma9LYDbt07fBnI07FFR5Rm6ufVgpm0T/Cvk4wYnHvyC8pzdtvMXlTW7E5TXQnvF3uvGDiCwU39a7ZRl/X0r9ZIpeLrl91HnG0nDOIPDRg3vfJm2u1PN440thIBkwsaQTIkz9VL/WrFPnu75Hemi5BtDTcpcPzDUi8YAcbXAKktSqnofXmzaH6w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=UKCx9rVhvbv/fIyzqVgPya2hpGae6CfdaR5+NFuEuQE=; b=M8pzcU6VMhQFlEv228+QzpfxNcqD/WQvWHPnp9vWMn+9RRwi2473xoU9qNofzeo+FG7+arAfDEpQdeCqKwEu/3KUQtmvgR3cXI3IsuNJRrmd0SKX9B5/qrZTdNxyVnv4jvX3oGb683eCg6QlnUDCVWga5krNRns0RWCBpbcs1SfldYyT/TpW4NTfgPphfjIwzrAoA0Km/gxP41zd10L4rsHEld3NKi3lvBKYe5Gf0Mx8qFKbeCXMy+G9kOOjKr2G7vJP7xHKrGZWunWYlvMNKC7ap+U4HHTGBagGaYkXPzPaZigEfsk4ZwOcVVl4d0zjFo4OrFk3OnB60ItfGWja4w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
Received: from MN2PR11MB4414.namprd11.prod.outlook.com (2603:10b6:208:17b::27) by MW4PR11MB6983.namprd11.prod.outlook.com (2603:10b6:303:226::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7181.17; Tue, 9 Jan 2024 15:24:16 +0000
Received: from MN2PR11MB4414.namprd11.prod.outlook.com ([fe80::74c7:99c8:67bc:326b]) by MN2PR11MB4414.namprd11.prod.outlook.com ([fe80::74c7:99c8:67bc:326b%5]) with mapi id 15.20.7159.020; Tue, 9 Jan 2024 15:24:16 +0000
From: "Owen Friel (ofriel)" <ofriel@cisco.com>
To: "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] I-D Action: draft-ietf-tls-8773bis-01.txt
Thread-Index: AQHaQwzPVZzicVaO0kGsCblsJ0ddyLDRmEuA
Date: Tue, 09 Jan 2024 15:24:15 +0000
Message-ID: <MN2PR11MB4414921D68B795BBF8DB5210DB6A2@MN2PR11MB4414.namprd11.prod.outlook.com>
References: <170481245798.22361.15305162666106839556@ietfa.amsl.com>
In-Reply-To: <170481245798.22361.15305162666106839556@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MN2PR11MB4414:EE_|MW4PR11MB6983:EE_
x-ms-office365-filtering-correlation-id: 7010d281-aa60-4cc9-9406-08dc11270aad
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR11MB4414.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(366004)(396003)(346002)(376002)(39860400002)(136003)(230273577357003)(230173577357003)(230922051799003)(1800799012)(64100799003)(186009)(451199024)(55016003)(53546011)(66556008)(64756008)(478600001)(66476007)(9686003)(6506007)(76116006)(66946007)(86362001)(33656002)(66446008)(7696005)(38070700009)(83380400001)(66574015)(38100700002)(122000001)(26005)(2906002)(5660300002)(71200400001)(316002)(6916009)(966005)(41300700001)(8936002)(52536014)(8676002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: bnDyOdiJ4dPrELK5FR13B4JSyzJ7v/xVrf5zXycykiU3C0s6s/qKIY9u2+5fkBqJk9r0KWJjCAQra8L4Lz+XN/VQaJCk+ooz5RPINoyH8QZyZxpV/Vpn7A/ICE+xPR2ZWa3z9+tMV4A3eiYuJt3jEXxIVYy/9oLAAcM4WzV/O6h77cM6ci4P0T3SgToQTYwwAlSmqR//HLqhqHKIdV1fop7Wp1jL0XQgJvf0A/ukbZneShmte6QJh9bi0PTluOLmGLtq+AQ5bixi64R77w7n/7CblXHgUC/6nTLwEnzuAewgWP+I6Y7kHv5AXy0FugsqJAlfgnEu3+qKJyKzy5zZCAtgWqw8Sd+fm8ISwY4UWutDs/gt8BwzrT/tNlJKdhNKJd+AS9feviI/c/DOwlme7j66+5EMN9aNi3kec0V92bLH7Ngszn6muM1O282eZ3j7AbxVb6DH0WRplfMz/IAouYStFGRnEeulEUnUQhhZx7Ln4saWKRR9anZi/WboSafdfGC72OOMG0bMY/FNG7tE9EHOej42Gl0G0vwKFvhgK7ewUNHHYLFbcB3dA3e4WhiRH/1qMVmDqfqsK/OoqNRqVDk9KrGWO2deoaV42jMLycME+PMPZqOQAY7qCT8hwBhfQXjJD/0ajqLqZ95Tk+eJI2d2W77lnR6TY85qpZbmBdNicd3RkEbXC+2S7PfOuywEkaVBlqFcRBxc1lDVm8RBt2quDuOuqbWe5Lp3fhrD/TTRbNi3d6sB07XwsETctevqlhiti3NySx4HBjR+MfrzHwUY9hvVvxMDelKQuGUQqbpy74APXGnam1wU1Rs7CgjZnR4b0QzED9UxwjB2v2HX1vwUv19Y25kklOKiqcLW/TPIJn5APfhKxPPY2f9G5gzU1ZLNbcAdwfOlsz3zaM0GUnVQayvKDQJpM/xkSSot7Lj1lHhqb0mTO8zKjfKPOj6P8wwe3jPwLfZgKUVV0PUN2GOXd6QLPyluIYnE2NNZ1PjxBmbZEo1rWsUvbs08X+88h579egaRGCqkTr6w8fhz9WKp0m1haIUvBJhmVJXCh+9edU19lzVKEhxCsT1V2UeY64zJEgE2ttY6DmDZ5aHojhc6WEWUxr4rAbp5SBa0+djtbytyuP59JS0groCfW0nl67xnuDjJZ5ILnPuAMoOFZTbGdBvP+lVZnQ3as5qjl+gNDaLUaQrVH0LMPDRqL583cz/feOqBxTILdQP+gjSDGHSWo0tci2kQJPxvk5+2HjLFIGZzKkZC26Lzxnex3nrofxgJS6XgPVd2ejP+8nDcyHFDNt3jBTaik+5YQW9FuAf3YwrJpVY04JsyqaFoQht26N15cJz/iamgnmPPGRw0IcFP883fdP6bagbOucpF9tRvpMYa4GbLJ/j6qxFiAi6vcglJhCaVv+HT1KSX4nill9XKOb/UNmsWiE7ve8YFCa8BvihJTW9FGtbiIIPtlZgWFTUe4YSi2RPb2VneK3MuXPw8lWvL/IfcWWHXz16ZH/X9ilEkqaKLKidIlRQlWizdnUMpOihwRWTCvoGqkT5WJpjPkyeDBOyciqPs1nW/yfY=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR11MB4414.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 7010d281-aa60-4cc9-9406-08dc11270aad
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jan 2024 15:24:16.0057 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: bLmPOh9QH/BhkL58U4aKeBde6SKILKHLYin1dseXRtZPoGmLE643abLdAuBgOm1xggwpQODLshahqU4Xrr7UDA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR11MB6983
X-Outbound-SMTP-Client: 72.163.7.165, rcdn-opgw-4.cisco.com
X-Outbound-Node: rcdn-core-6.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/gbomHyobmonJFtaTG9-hb_s6uLw>
Subject: Re: [TLS] I-D Action: draft-ietf-tls-8773bis-01.txt
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Jan 2024 15:24:24 -0000

Thanks for publishing Russ. Good to see that the confusing section on Resumption from draft-00  https://datatracker.ietf.org/doc/html/draft-ietf-tls-8773bis-00#section-3.2has been removed. Its now clearer that tls_cert_with_extern_psk MUST NOT be used with early_data extension, so that removes one of the major concerns from the mailer discussion.

Joe also raised this PSK selfie attack: https://eprint.iacr.org/2019/347. I don't think RFC8773bis is vulnerable to this as the selfie attack relies on PSK only for authentication, whereas RFC8773bis uses both PSK + cert auth.

-----Original Message-----
From: TLS <tls-bounces@ietf.org> On Behalf Of internet-drafts@ietf.org
Sent: Tuesday, January 9, 2024 3:01 PM
To: i-d-announce@ietf.org
Cc: tls@ietf.org
Subject: [TLS] I-D Action: draft-ietf-tls-8773bis-01.txt

Internet-Draft draft-ietf-tls-8773bis-01.txt is now available. It is a work item of the Transport Layer Security (TLS) WG of the IETF.

   Title:   TLS 1.3 Extension for Using Certificates with an External Pre-Shared Key
   Author:  Russ Housley
   Name:    draft-ietf-tls-8773bis-01.txt
   Pages:   15
   Dates:   2024-01-09

Abstract:

   This document specifies a TLS 1.3 extension that allows TLS clients
   and servers to authenticate with a combination of a certificate and
   an external pre-shared key (PSK).

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-tls-8773bis/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-tls-8773bis-01

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-tls-8773bis-01

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

v2.46.0 | Report a Bug | By Email | System Status