Re: [TLS] Proposed text for removing renegotiation

[Nikos Mavrogiannopoulos <[e-mail]>]

On Sat, 2014-06-07 at 08:41 -0700, Eric Rescorla wrote:

> 
> separate "TLS Record Protocol" (Section 6) and "TLS Handshaking
> Protocols" (Section 7) with the handshake protocol establishing a
> Master Secret for the entire session which is then used to derive
> distinct record keys every time you reconnect (resume) in the same
> session, with diversity provided by the random values. So, arguably,
> TLS already behaves this way, with the exception of dealing with
> cryptographic exhaustion of the transport keys (e.g., GCM counter
> rollover).
> MT's basic suggestion is to fix the cryptographic exhaustion

Could somebody elaborate on what is that issue and why does it need to
be solved? (it is not even mentioned in the TLS 1.3 charter) As someone
who follows the mailing list that proposal comes out of the blue with no
context whatsoever.

regards,
Nikos