Re: [TLS] WGLC for draft-ietf-tls-hybrid-design

Stephen Farrell <stephen.farrell@cs.tcd.ie> Mon, 02 May 2022 14:53 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48715C1594B0 for <tls@ietfa.amsl.com>; Mon, 2 May 2022 07:53:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.857
X-Spam-Level:
X-Spam-Status: No, score=-3.857 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, NICE_REPLY_A=-1.857, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3cqszKdSthyG for <tls@ietfa.amsl.com>; Mon, 2 May 2022 07:53:24 -0700 (PDT)
Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on20715.outbound.protection.outlook.com [IPv6:2a01:111:f400:7e1b::715]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 904EBC14F74C for <TLS@ietf.org>; Mon, 2 May 2022 07:53:23 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AI6nRIECb0TYHglYyJxuicGAb9n1AqX7UBNcjfXwVhUxaehwj/UND4ErggjhQIE/ESTJcxPAHt+jIM83uKU2X6M+/L6x4pA57HkVW2DRsDwauo1npalinCGlE1TK+umlN1YTD0mYYnF1v5qipxyfIYiMrjd95dQ8xXNGeKwfIHWY9KVOchzP9ag2TMVUTaV18uxHp6MC1dYecZcsZnXAWx9w9g6YdueUSa24m2EPD/LB/4mhMbG8bLovxFksnJWUp2JLJW+3NFC+UUiiUfx0QXSZeatesZizybMsHm6GUC1iGLA+Mrz2Xbswg1hH+Ey1aHmRusqAYcvYZ47cbntPDA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=7Tf9p4U4oBADsx9yC9wYFhf+gc63i4jZaRI+fgU41ak=; b=GbxSmUoYTsB64x9xdK+82aiz3GrrvqfqoVaoTD8fx9B3h8NHTi32U1qe+fu34pGCF/TnVgg2dYuboOIp+N/ilppwzp0tH6BusTs2GYmBhZQgzFjzrHKhis9GNAlrjcX3UbMmT8gXS9wHDuUS7otAYQSZ98aoObhoGlifkeWQ6ADocOI/6m1PyhpCqrozdt1Pe4Xsc+E81ygW+FYIkz2saFDvTroeuKTqMQdXLTnkNsb6lJKxdEWvyHIj1SonL0zZjIr6PRmtZvRYSNRcWN1+cn8wz98NjRD1uxtUhJD8QD4/cUjbKYFFwQ/pREg6NBVeJFI/3s4A3SILeyVisgYs9g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7Tf9p4U4oBADsx9yC9wYFhf+gc63i4jZaRI+fgU41ak=; b=nftQbbWC08bZo12NPTgLCA4a+YR2knpMstRfouLTMRaMvmjaJOJb1vxl5YBBfwgqPTq1TrO5KB7z6EFIjX0ClgKEGCsiGoTf9q5FPkVd927jgQfFQkFx9yPhrm5A41HQAEYJwgm/EZ8k6kYyiqXepbCMAS0FoITCHATXJGaev9l0YQk2uQcMBrwKyYcjzPKIvxWL4JN7Y4Z5lAHQD5U9to9wg1Fbfy37Zzq3SWfu/Olx8pZX37pmry+LsNfqNRpFP7wObqZiEJSQxwRgbCZXhAFPxUvIelbqK0RohQg+QOG0ynoRT/el2k7yAAfEZBOzzpUwIQRKy0UjOxlWx6Fdog==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from DB7PR02MB5113.eurprd02.prod.outlook.com (2603:10a6:10:77::15) by AM0PR02MB4577.eurprd02.prod.outlook.com (2603:10a6:208:f5::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5206.13; Mon, 2 May 2022 14:53:17 +0000
Received: from DB7PR02MB5113.eurprd02.prod.outlook.com ([fe80::e93d:e1fe:56bb:f980]) by DB7PR02MB5113.eurprd02.prod.outlook.com ([fe80::e93d:e1fe:56bb:f980%7]) with mapi id 15.20.5206.024; Mon, 2 May 2022 14:53:17 +0000
Message-ID: <0f9baa3f-586f-1cc0-ecef-19e8250c53ee@cs.tcd.ie>
Date: Mon, 2 May 2022 15:53:16 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.8.1
Content-Language: en-US
To: Ilari Liusvaara <ilariliusvaara@welho.com>, "TLS@ietf.org" <TLS@ietf.org>
References: <27E9945C-6A0A-46DD-89F0-22BE59188216@heapingbits.net> <e43fc649-3fc6-333b-c44d-55de0627c710@cs.tcd.ie> <Ymz7yncQAnzmp/eL@LK-Perkele-VII2.locald> <38de10e6-ab3c-6ea1-44b7-57057c97e7aa@cs.tcd.ie> <Ym+rYlVcrxXe35mh@LK-Perkele-VII2.locald>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
In-Reply-To: <Ym+rYlVcrxXe35mh@LK-Perkele-VII2.locald>
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------Aj2vH3Tn5K8LA5dhGzQVAeyx"
X-ClientProxiedBy: DB6PR07CA0024.eurprd07.prod.outlook.com (2603:10a6:6:2d::34) To DB7PR02MB5113.eurprd02.prod.outlook.com (2603:10a6:10:77::15)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 9531197a-c725-4c8f-bdb2-08da2c4b7e27
X-MS-TrafficTypeDiagnostic: AM0PR02MB4577:EE_
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-Microsoft-Antispam-PRVS: <AM0PR02MB4577F5258F16E9DFC50C2111A8C19@AM0PR02MB4577.eurprd02.prod.outlook.com>
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB7PR02MB5113.eurprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(21480400003)(6486002)(31696002)(508600001)(83380400001)(2616005)(86362001)(6512007)(33964004)(53546011)(6506007)(38100700002)(2906002)(316002)(786003)(66556008)(186003)(235185007)(66946007)(44832011)(5660300002)(36756003)(8936002)(31686004)(110136005)(8676002)(66476007)(43740500002)(45980500001); DIR:OUT; SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?OWxEamowY2F2YmgzZk9VSkFESlZ5WmFhVUEwcWE2bFduUnlaOWlzekJUVjhG?= =?utf-8?B?NzgzTC9iZGlBbzhGbXg3bVZyUVRXUDl2ZjRwZlZlVUJ6bnR0bFBXbmdPZDVz?= =?utf-8?B?TTRoWHozckljcEhVL2RUaHNJWFZTQ2sxcXBJK2szVE01Ni94bnMvd1RhVkdW?= =?utf-8?B?ckQ4TGtjaWU5Rk9KSFMzbGZETzQ1dFg3KzJTY0N1SmdsbHlTNGN3SHpick5z?= =?utf-8?B?eUpSYmlJLzZybUlWSkRiaWdTTzdCbEIxRjNDN0dIbGFkUWlXeW9BdzdLWkdi?= =?utf-8?B?dU9qWGlIY01XM21PQ1lXNW5SZkZlSndrRnJQOCsrWmhuK0dwZXFMaXpIZ3Bz?= =?utf-8?B?Rmp6ODMrakJjZWFzejFqeitVRDdxQlN6ei8xSVBGcmUzcnE2WEFlYWh5TTR6?= =?utf-8?B?Rm96TzlDd1JqMmNqWVp1Tnd1Vks3Rmtsa3IxbktZUEJlY0lLaTk0S1JKTnh6?= =?utf-8?B?VTI2MCsvRWdCN1lTdUcyd05lS2F3L2QwNzFZcGx5RmxvdGlyVm8rL3hZOWtv?= =?utf-8?B?UUJneFpXclVhQ0tWcVFCN09jb0hEcit6cUgwTStDOG41ZGNLM2VuTXpOdkd4?= =?utf-8?B?ck8wRGxZNHE1ajRvRUd1ZndFRm5tZ1VFc3ZScU53eTRSZDN3aG5ORzRRL3R6?= =?utf-8?B?bXg0RkczZWN1bW0rUXRHVWVIMnRkdmZidEhTUUNvTi9oeHkwWVIzZU0vNEVz?= =?utf-8?B?V2xQWnREOGtXbjh3N05zM29SMnlpZzVTcDhZWGFvaDJsQWtKWmNuVm01RWVV?= =?utf-8?B?WU9zYmhKWkkvUlFVUXZ6eFRLUWxwOVFObnVDT2ZyajdCa0NVdDlkTktxZnVR?= =?utf-8?B?Mzl0cmtOWFF6TmU5K1NDOXhMZzlDcy9ZVkFCRC9JNkYyL3BOSk8xU2dxTEk2?= =?utf-8?B?bVM1d1kzaTlvTW1yMzVPaGFyOXc2bnpWMW9ON05KR2I3dHFSUS9YQnhtVExu?= =?utf-8?B?VGFsUW1zWFhJREEzTlhua1I2ZGc1OFc5c21Pc1Rib01DeHNhRDNGdC80a2pU?= =?utf-8?B?dXRQOExWOTM1TlRVWFQ4TzhmRWluS2kzblpEMVFTWm9XTlJHV3dLL1hmU0kz?= =?utf-8?B?a0dKbTlSVk9TTzZQb0VtTzhMZmdhY0RZaS8zcEdBRWo5UiswRU9QTTBQTlpP?= =?utf-8?B?QTFxNHFmS3dIVk9PMHUyOEUxdUJHMXRzU0NsVVk1NmdySWNRN1RQRXZ2ZWNw?= =?utf-8?B?L3VGaDNHdlVzY3NTbGdrL0tNcmVxdko1NnRSNzR6NzcyNUxwV09kajk5M2xV?= =?utf-8?B?ZUIzaHFMRWliamVNaU5FdWlHaVMyS3JKb0RUVm0xbXYwQzBlNHBpbjB6Mmg5?= =?utf-8?B?eHpxWlUxVXAwb0h6QlFoVVk3SEdOaTJnQXBBQjNZYVBlbExndXd1RlovVUV6?= =?utf-8?B?YVUyQ252bU5iUnV3RVZ4bHdRdzh3ei9SMmhVREtocmloU2drRmtyZHVMU01C?= =?utf-8?B?WG1UYk51V3h3QU9pRTlSN2xINFlZN2JzamNPY01jRjVYKzNUMzhiVkI3L203?= =?utf-8?B?ekdWWkE2MjVhWW44Z0hLbkV4MGF3L3k3RVcvbkhyY0R2UkhDMC93dFZVMXFV?= =?utf-8?B?ME1CazYreDVlUnNld3hTWmR1ZHQzZDR2bUZ2SDZGS2J2eUhGSHZ2Y1BOS3BO?= =?utf-8?B?TUhBZnA1aS9EcmZFZVFvaVFhdlpwQndTTGlFRU5wdGVQSnBIYld4OEt4dlRJ?= =?utf-8?B?ZlZ3WnJPbjV1bk5aUUFRaXR1c09BMDNXcXBqOHh6VUl6cE5xZjBmWmNEYWhr?= =?utf-8?B?RWVDVzQwTTlkWFVackpKM01KUWhHQXA3bUIra2JoSDRKc1FQS1pxSDlkQkJR?= =?utf-8?B?KzNjaU1raUFLdGNJT2pPam5YNDgyelZ3SnAxVEdkM3N2aisyb2xORWMxWi8x?= =?utf-8?B?VEZpY0JKNkpIUUtUMnFHRTdLemxnL2xoQzFvRG1UWUhhQ1hieno1c0pTSlZ0?= =?utf-8?B?SHk1ekNSekFEdmswNkV6NG1PT0pzWUxDTGNHdzJqVkVZYk5kMFNrNFNuVEkx?= =?utf-8?B?ZzhSSHNoY0pXa1ZiYTRaY293YjZydUthSW9MRU1RQ3FHZHFQRWtCMjdKWExT?= =?utf-8?B?Q0VieFRRdDhMRHZNMkpvbmNyZjIwZ2RWZkUyMlVBQk1TbklydFFzS01JKzJW?= =?utf-8?B?U3cwUmtSSVVxTzhFL3IxRUdXeVFLZXduQnRmNTZXVVBkYzRnZ25HbmFKNWpG?= =?utf-8?B?SDIzd2JVeC9lbTVKcG9Ncll4NjVYY3RzUTNEVWdOSXo3ZGlFOFcxRVEzRUxp?= =?utf-8?B?cWhFUVBCYnRMK29kdmc3K1JXSDJzaHlCd0cwQnNzeEVIMDNRR3hQN2lzelI3?= =?utf-8?B?ZHpMVTlNZmsxNzQyYXUyaGFaWC9uZjRtSDdqZ3U0NW5BZ2YzMXhwaWxVUHV0?= =?utf-8?Q?JnM2V2UDPPpeq64k+2/pasS0mKPAXZwG0CmIXpSiQWYgE?=
X-MS-Exchange-AntiSpam-MessageData-1: sN5xZMYZQHDm8g==
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 9531197a-c725-4c8f-bdb2-08da2c4b7e27
X-MS-Exchange-CrossTenant-AuthSource: DB7PR02MB5113.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 May 2022 14:53:17.8611 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: TzhpkdoFDp0vRWa/fi011Z8b19nA73gVJfID7gGMJAIMmD5JPGfuhjl3dkWBKEFC
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR02MB4577
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/iY6J1K3fs6l4tv-FbeYMeT1M-A4>
Subject: Re: [TLS] WGLC for draft-ietf-tls-hybrid-design
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 May 2022 14:53:29 -0000

Hiya,

Just on this one point:

On 02/05/2022 10:58, Ilari Liusvaara wrote:
> Furthermore the extension involved (key_share) REALLY SHOULD NOT
> differ between inner and outer hello.

I kinda agree, but the ECH spec allows 'em to differ.

In any case, the main point here is that this compression
issue is not discussed in the draft and IMO ought be before
the draft could be considered ready.

Cheers,
S.