Re: [TLS] TLS Proxy Server Extension

Hi,

I just skimmed the start of the document

I assume, from context, that your use case is for proxies that perform an  
authorized MITM "attack" on the TLS connection by issuing specific "fake"  
certificates for the site you are connecting to, decrypting/re-encrypting  
the encrypted data, and not a proxy that uses the normal HTTP CONNECT  
request and just passes packets back and forth and the TLS connection is  
end-to-end. Right?

If so, that should perhaps be made clearer in the introduction and  
abstract, possibly by using a different term for the proxy? My association  
with "proxy" is generally the ordinary CONNECT packet forwarding proxy,  
not the MITM proxy.

IMO, when you authorize a proxy to MITM your connections, you also  
implicitly accept the security policies of the proxy, and whatever  
encryption and certificate it trusts.

As an alternative way forward, might it not be an equally good way forward  
to require the proxy to either negotiate the same encryption methods with  
the client as it negotiated with the server, or alternatively, only offer  
the mutually acceptable set of cipher suites for the client and proxy  
(perhaps with an addition for better suites, allowing an encryption  
upgrade)?

On Tue, 26 Jul 2011 17:01:31 +0200, David McGrew <mcgrew@cisco.com> wrote:

> Hi,
>
> I would like to request feedback on a new draft that Philip Gladstone  
> and I put together, which aims to solve some of the security problems  
> that happen when there is a (HTTP) proxy present and TLS is in use.    
> The approach is to require the proxy to provide the client with  
> additional information that the client can use to make a well-informed  
> decision about the security of the session.  This draft was put together  
> too late to request a slot at the WG meeting this week, but if you have  
> thoughts on either the goals or the mechanism, we can discuss either in  
> person or on the list.
>
> David
>
> http://tools.ietf.org/html/draft-mcgrew-tls-proxy-server-00
>
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls

-- 
Sincerely,
Yngve N. Pettersen

********************************************************************
Senior Developer                     Email: yngve@opera.com
Opera Software ASA                   http://www.opera.com/
Phone:  +47 24 16 42 60              Fax:    +47 24 16 40 01
********************************************************************