Re: [TLS] Fwd: New Version Notification for draft-sandj-tls-iana-registry-updates-00.txt

Benjamin Kaduk <> Tue, 13 September 2016 17:55 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id EA099128874 for <>; Tue, 13 Sep 2016 10:55:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -4.208
X-Spam-Status: No, score=-4.208 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-1.508, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (1024-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id SWJUAvmvC4Uk for <>; Tue, 13 Sep 2016 10:55:51 -0700 (PDT)
Received: from ( []) by (Postfix) with ESMTP id 7596B126D74 for <>; Tue, 13 Sep 2016 10:55:50 -0700 (PDT)
Received: from (localhost.localdomain []) by postfix.imss70 (Postfix) with ESMTP id AC6B5433443; Tue, 13 Sep 2016 17:55:49 +0000 (GMT)
Received: from ( []) by (Postfix) with ESMTP id 94535433442; Tue, 13 Sep 2016 17:55:49 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=a1; t=1473789349; bh=ZKOkPGCotP11hQqxRRN8Zi9f/f8NUzJk3MCWXiIdGzA=; l=12786; h=To:References:From:Date:In-Reply-To:From; b=vP5oSR8D35W+dl6jMsievSr0Qa1+Unua3MNpfho5zOdl4PI+BBsf8F8shuTf/rsLq M60zIhXd8Fxd8BPbJjHnEB27ZlEBN3wpGpT/01d7uSH7S1qzwlWRKrGi4+z7BKjDMo Jo2KX7H5AFtAvGJE2tEAZJayvzebDROg7dSZ3BBo=
Received: from [] ( []) by (Postfix) with ESMTP id 534ED1FC8B; Tue, 13 Sep 2016 17:55:49 +0000 (GMT)
To: Sean Turner <>, "<>" <>
References: <> <>
From: Benjamin Kaduk <>
X-Enigmail-Draft-Status: N1110
Message-ID: <>
Date: Tue, 13 Sep 2016 12:55:49 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <>
Content-Type: multipart/alternative; boundary="------------70B2623EE12ED1DCDC9690E6"
Archived-At: <>
Subject: Re: [TLS] Fwd: New Version Notification for draft-sandj-tls-iana-registry-updates-00.txt
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Tue, 13 Sep 2016 17:55:54 -0000

For the 16-bit fields, do we want to leave first-octet-zero values as IETF Consensus and leave 1-254 for Specification Required?

I suspect we'll need to wordsmith the text for the "Recommended" field in the cipher suite registry some; Standards-Track may or may not quite match up exactly with what we want (though it seems like it would be pretty good), but I would maybe say "for cipher suites marked 'No', it is possible that the cryptographic properties are not reviewed, and they may be bad or good".

Should the session_ticket extension also be updated to point to this document (as was done for the new_session_ticket handshake message type)?

I guess the security considerations should probably mention that making it easier for "anyone" to get a codepoint assigned comes with a risk that people will assume that having a codepoint means it's secure.  The "Recommended" column attempts to address that, and software authors are encouraged to read the primary sources to determine the applicability of an entry to their software.

Some minor notes on snippets of the document follow.

The markdown-to-html conversion seems to have left long lines in sections 10 and 12; maybe there are some syntax errors around there?
(Also, "however the value is computed different" should be "differently".)

   o  Change the IANA registry policy [RFC5226 <>] for the TLS
      ExtensionType Values, TLS Cipher Suite, and TLS
      ClientCertificateType Identifiers registries.  These more relaxes
      rules are more condusive to TBD.

"relaxed".  Huh, and thunderbird is also suggesting "conducive", that I missed.

The TBD seems to be "experimentation and test deployment of draft specifications".

   o  Add the designated expert intructions as a note to the TLS
      ExtensionType Values, TLS Cipher Suite, and TLS
      ClientCertificateType Identifiers registries to inform IANA-
      registry-focused, non-RFC-reading what's expected from the


The "non-RFC-reading" compound adjective doesn't have an associated
noun.  "Readers" could work, but since "reading" is right there, maybe
"viewers" is better.

   This document proposes no changes to the TLS Alert
<>], TLS ContentType [I-D.ietf-tls-tls13
<>], TLS
   HandshakeType, [I-D.ietf-tls-tls13
<>] and TLS Certificate Status Types
   [RFC6961 <>]; Standards Action, for the 1st three, and IETF Review, for
   the last, are appropriate for these one-byte code points because of
   their scarcity.

I think "registries" is missing after the list.

In "The following extensions are only applicable to D/TLS protocol
vesions prior to 1.3: truncated_hmac, srp, encrypt_then_mac,
extended_master_secret, session_ticket, and renegotiation_info are not
applicable to TLS 1.3." (another long line), the "only applicable [...]
prior to 1.3" and "are not applicable to TLS 1.3" are redundant.  Also,
"versions" with an 'r'.


On 09/07/2016 01:57 PM, Sean Turner wrote:
> Here is a draft that proposes changes to a number of TLS-related registries, e.g., adding notes to indicate orphaned extensions and registries, adding the missing no_application_protocol alert.  The motivation for this draft was to not have everything that needs to be fixed be done in the TLS1.3 draft.  We’re positive it needs review.
> A repo for the draft can be found at:
> PRs welcome.
> spt
>> Begin forwarded message:
>> From:
>> Subject: New Version Notification for draft-sandj-tls-iana-registry-updates-00.txt
>> Date: September 07, 2016 at 14:10:25 EDT
>> To: "Joe Salowey" <>et>, "Sean Turner" <>om>, <>rg>, "Joseph A. Salowey" <>
>> A new version of I-D, draft-sandj-tls-iana-registry-updates-00.txt
>> has been successfully submitted by Sean Turner and posted to the
>> IETF repository.
>> Name:		draft-sandj-tls-iana-registry-updates
>> Revision:	00
>> Title:		D/TLS IANA Registry Updates
>> Document date:	2016-09-07
>> Group:		Individual Submission
>> Pages:		8
>> URL:  
>> Status:
>> Htmlized:
>> Abstract:
>>   This document changes the IANA registry policy for a number of D/TLS-
>>   related registries, renames some of the registries for consistency,
>>   and adds notes to many of the registries.  As a result, this document
>>   updates many RFCs (see updates header).
>> Please note that it may take a couple of minutes from the time of submission
>> until the htmlized version and diff are available at
>> The IETF Secretariat
> _______________________________________________
> TLS mailing list