Re: [TLS] Confirming Consensus: Negotiating upper layer protocols

Andrei Popov <Andrei.Popov@microsoft.com> Fri, 08 February 2013 19:37 UTC

Return-Path: <Andrei.Popov@microsoft.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55DCC21F8A67 for <tls@ietfa.amsl.com>; Fri, 8 Feb 2013 11:37:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.533
X-Spam-Level:
X-Spam-Status: No, score=0.533 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, UNRESOLVED_TEMPLATE=3.132]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d6X+lkNrsE8P for <tls@ietfa.amsl.com>; Fri, 8 Feb 2013 11:37:57 -0800 (PST)
Received: from na01-by2-obe.outbound.protection.outlook.com (na01-by2-obe.ptr.protection.outlook.com [207.46.100.28]) by ietfa.amsl.com (Postfix) with ESMTP id C9D0221F8640 for <tls@ietf.org>; Fri, 8 Feb 2013 11:37:57 -0800 (PST)
Received: from BY2FFO11HUB037.protection.gbl (10.1.14.120) by BY2FFO11HUB001.protection.gbl (10.1.14.143) with Microsoft SMTP Server (TLS) id 15.0.620.12; Fri, 8 Feb 2013 19:37:56 +0000
Received: from BY2FFO11FD007.protection.gbl (10.1.15.200) by BY2FFO11HUB037.protection.gbl (10.1.14.120) with Microsoft SMTP Server (TLS) id 15.0.609.9; Fri, 8 Feb 2013 19:37:13 +0000
Received: from TK5EX14HUBC103.redmond.corp.microsoft.com (131.107.125.37) by BY2FFO11FD007.mail.protection.outlook.com (10.1.14.128) with Microsoft SMTP Server (TLS) id 15.0.620.12 via Frontend Transport; Fri, 8 Feb 2013 19:37:13 +0000
Received: from CO9EHSOBE013.bigfish.com (157.54.51.80) by mail.microsoft.com (157.54.86.9) with Microsoft SMTP Server (TLS) id 14.2.318.3; Fri, 8 Feb 2013 19:36:27 +0000
Received: from mail107-co9-R.bigfish.com (10.236.132.226) by CO9EHSOBE013.bigfish.com (10.236.130.76) with Microsoft SMTP Server id 14.1.225.23; Fri, 8 Feb 2013 19:33:45 +0000
Received: from mail107-co9 (localhost [127.0.0.1]) by mail107-co9-R.bigfish.com (Postfix) with ESMTP id 2E8A12C0389 for <tls@ietf.org.FOPE.CONNECTOR.OVERRIDE>; Fri, 8 Feb 2013 19:33:45 +0000 (UTC)
X-Forefront-Antispam-Report-Untrusted: CIP:157.56.240.21; KIP:(null); UIP:(null); (null); H:BL2PRD0310HT005.namprd03.prod.outlook.com; R:internal; EFV:INT
X-SpamScore: -21
X-BigFish: PS-21(zz9371I542I4015Izz1f42h1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL8275bh8275dhz31h2a8h668h839h944hd24hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h9a9j1155h)
Received-SPF: softfail (mail107-co9: transitioning domain of microsoft.com does not designate 157.56.240.21 as permitted sender) client-ip=157.56.240.21; envelope-from=Andrei.Popov@microsoft.com; helo=BL2PRD0310HT005.namprd03.prod.outlook.com ; .outlook.com ;
X-Forefront-Antispam-Report-Untrusted: SFV:SKI; SFS:; DIR:OUT; SFP:; SCL:-1; SRVR:BN1PR03MB069; H:BN1PR03MB072.namprd03.prod.outlook.com; LANG:en;
Received: from mail107-co9 (localhost.localdomain [127.0.0.1]) by mail107-co9 (MessageSwitch) id 1360352018192758_2721; Fri, 8 Feb 2013 19:33:38 +0000 (UTC)
Received: from CO9EHSMHS030.bigfish.com (unknown [10.236.132.251]) by mail107-co9.bigfish.com (Postfix) with ESMTP id 0A9E2C005A; Fri, 8 Feb 2013 19:33:38 +0000 (UTC)
Received: from BL2PRD0310HT005.namprd03.prod.outlook.com (157.56.240.21) by CO9EHSMHS030.bigfish.com (10.236.130.40) with Microsoft SMTP Server (TLS) id 14.1.225.23; Fri, 8 Feb 2013 19:33:37 +0000
Received: from BN1PR03MB069.namprd03.prod.outlook.com (10.255.225.153) by BL2PRD0310HT005.namprd03.prod.outlook.com (10.255.97.40) with Microsoft SMTP Server (TLS) id 14.16.263.1; Fri, 8 Feb 2013 19:33:36 +0000
Received: from BN1PR03MB072.namprd03.prod.outlook.com (10.255.225.156) by BN1PR03MB069.namprd03.prod.outlook.com (10.255.225.153) with Microsoft SMTP Server (TLS) id 15.0.620.10; Fri, 8 Feb 2013 19:33:35 +0000
Received: from BN1PR03MB072.namprd03.prod.outlook.com ([169.254.10.107]) by BN1PR03MB072.namprd03.prod.outlook.com ([169.254.10.107]) with mapi id 15.00.0620.005; Fri, 8 Feb 2013 19:33:35 +0000
From: Andrei Popov <Andrei.Popov@microsoft.com>
To: Peter Gutmann <pgut001@cs.auckland.ac.nz>, "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] Confirming Consensus: Negotiating upper layer protocols
Thread-Index: Ac4F6jk6vZcw997fQUyk2Kk+6rQABQASGu0g
Date: Fri, 08 Feb 2013 19:33:34 +0000
Message-ID: <2a0dba490ca94ad69a386d1d695256fc@BN1PR03MB072.namprd03.prod.outlook.com>
References: <9A043F3CF02CD34C8E74AC1594475C73333FEB17@uxcn10-2.UoA.auckland.ac.nz>
In-Reply-To: <9A043F3CF02CD34C8E74AC1594475C73333FEB17@uxcn10-2.UoA.auckland.ac.nz>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.255.124.4]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OrganizationHeadersPreserved: BN1PR03MB069.namprd03.prod.outlook.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%CISCO.COM$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%IETF.ORG$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%CS.AUCKLAND.AC.NZ$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-CrossPremisesHeadersPromoted: TK5EX14HUBC103.redmond.corp.microsoft.com
X-CrossPremisesHeadersFiltered: TK5EX14HUBC103.redmond.corp.microsoft.com
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(377454001)(189002)(199002)(164054002)(13464002)(47736001)(74502001)(23726001)(5343635001)(50986001)(59766001)(77982001)(44976002)(20776003)(31966008)(63696002)(49866001)(74662001)(54316002)(56816002)(16676001)(47776003)(51856001)(46102001)(65816001)(33646001)(53806001)(5343655001)(76482001)(47976001)(80022001)(79102001)(50466001)(4396001)(46406002)(6806001)(56776001)(54356001)(47446002)(24736002); DIR:OUT; SFP:; SCL:1; SRVR:BY2FFO11HUB037; H:TK5EX14HUBC103.redmond.corp.microsoft.com; RD:InfoDomainNonexistent; MX:1; A:1; LANG:en;
X-Forefront-PRVS: 0751474A44
X-OriginatorOrg: microsoft.onmicrosoft.com
Subject: Re: [TLS] Confirming Consensus: Negotiating upper layer protocols
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Feb 2013 19:37:58 -0000

I agree that the current language is unclear; Peter's suggestion looks good to me.

Thanks,

Andrei

-----Original Message-----
From: tls-bounces@ietf.org [mailto:tls-bounces@ietf.org] On Behalf Of Peter Gutmann
Sent: Friday, February 8, 2013 2:51 AM
To: tls@ietf.org
Subject: Re: [TLS] Confirming Consensus: Negotiating upper layer protocols

Eric Rescorla <ekr@rtfm.com> writes:

>WG members, please provide any comments on whether we should take this 
>work on by February 21. Additionally, if you wish to propose an 
>alternative, it would be nice if you could do so soon or at least 
>provide an indication of interest.

A comment on both of these proposals, to encode their protocols they use an ad-hoc, non-TLS-style encoding whose form is rather unclear:

  Protocols are named by IANA registered, opaque, non-empty byte strings and
  the list of protocols is serialized as a concatenation of 8-bit, length
  prefixed byte strings.

Does this mean the strings use 8-bit chars, the lengths are 8 bit, both, or neither?  What's wrong with:

  opaque ProtocolName<1..2^16-1>;

  struct {
      ProtocolName protocol_name_list<1..2^16-1>
      } ProtocolNameList;

which fits the way everything else is done in TLS?

Peter.
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls