IETF Logo Mail Archive

Re: [TLS] Thoughts on Version Intolerance

Hubert Kario <hkario@redhat.com> Wed, 20 July 2016 13:37 UTC

Return-Path: <hkario@redhat.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06B2812D66B for <tls@ietfa.amsl.com>; Wed, 20 Jul 2016 06:37:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.209
X-Spam-Level:
X-Spam-Status: No, score=-8.209 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xRurWTK_4IwC for <tls@ietfa.amsl.com>; Wed, 20 Jul 2016 06:37:08 -0700 (PDT)
Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A070412D691 for <tls@ietf.org>; Wed, 20 Jul 2016 06:37:08 -0700 (PDT)
Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 97F6D4DAF1; Wed, 20 Jul 2016 13:37:07 +0000 (UTC)
Received: from pintsize.usersys.redhat.com (dhcp-0-107.brq.redhat.com [10.34.0.107]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u6KDb6LB020705 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 20 Jul 2016 09:37:07 -0400
From: Hubert Kario <hkario@redhat.com>
To: Watson Ladd <watsonbladd@gmail.com>
Date: Wed, 20 Jul 2016 15:37:05 +0200
Message-ID: <2675336.ahjJXf64CF@pintsize.usersys.redhat.com>
User-Agent: KMail/5.2.3 (Linux/4.6.3-300.fc24.x86_64; KDE/5.23.0; x86_64; ; )
In-Reply-To: <CACsn0c=+0YNBUKrFYiXsQCZyDkAbnyf8yxggwXw3ToA-kz1QKg@mail.gmail.com>
References: <20160720101402.09EC41A504@ld9781.wdf.sap.corp> <1577215.bshq0AhCfG@pintsize.usersys.redhat.com> <CACsn0c=+0YNBUKrFYiXsQCZyDkAbnyf8yxggwXw3ToA-kz1QKg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart1708589.SSRuIdWrpc"; micalg="pgp-sha512"; protocol="application/pgp-signature"
X-Scanned-By: MIMEDefang 2.68 on 10.5.11.22
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.29]); Wed, 20 Jul 2016 13:37:07 +0000 (UTC)
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/jl4Y3gET5bXmPTg7lC9O6jkfnhs>
Cc: "<tls@ietf.org>" <tls@ietf.org>
Subject: Re: [TLS] Thoughts on Version Intolerance
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Jul 2016 13:37:11 -0000

On Wednesday, 20 July 2016 06:24:50 CEST Watson Ladd wrote:
> On Wed, Jul 20, 2016 at 6:13 AM, Hubert Kario <hkario@redhat.com> wrote:
> > On Wednesday, 20 July 2016 14:49:03 CEST Kyle Rose wrote:
> <snip>
> 
> > I think that implementing complex binary cryptographic protocols is simply
> > hard.
> 
> And what conclusion should one draw about TLS 2.0 (*ahem* 1.3) as a
> result of this realization?

we need what I'm already working on - a test suite (and a standard that
makes it easy to know what is the expected behaviour for an implementation, in 
all cases)

-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic

v2.23.0 | Report a Bug | By Email