IETF Logo Mail Archive

[TLS] Re: Adoption call for TLS 1.2 Update for Long-term Support

"Salz, Rich" <rsalz@akamai.com> Fri, 22 November 2024 15:13 UTC

Return-Path: <rsalz@akamai.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EA4FC14F695 for <tls@ietfa.amsl.com>; Fri, 22 Nov 2024 07:13:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.251
X-Spam-Level:
X-Spam-Status: No, score=-2.251 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t6rwfx7k1Z3v for <tls@ietfa.amsl.com>; Fri, 22 Nov 2024 07:13:54 -0800 (PST)
Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) by ietfa.amsl.com (Postfix) with ESMTP id C899CC14F71C for <tls@ietf.org>; Fri, 22 Nov 2024 07:13:54 -0800 (PST)
Received: from pps.filterd (m0050102.ppops.net [127.0.0.1]) by m0050102.ppops.net-00190b01. (8.18.1.2/8.18.1.2) with ESMTP id 4AMD9S2X001532; Fri, 22 Nov 2024 15:13:43 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h= content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to; s=jan2016.eng; bh=X8+IMPm/ffwAitcHo1vaWq PNVqZdF4MagnBgrHHRIkw=; b=GO/OcP8yMT7zBBKmABgvSvuQm0jqdbUxwKtDjk G71DAmRSVjFoDCfAItHDbOLmwKhmBMATI8PiWguDaLYqX/laXJVCU80ZzwlRg77E KiiR6UsT+l0uir/MCydwIBkBLUh5+HHmbYD8Dn8Lq6ysr1eSMDIx6By7GAeVZTlI DSylC8g37Oy4om+5fEYg4MBrdYIfxVmst+2XOXri7o+enBNbZqnPOcjA3JfMGwxO QSL7O+9dm1Jntq4Z4ZcF+J9AvqphaCvlcM1pGKrUauF6NzGOJIoVwmCDhEsrrcsE UZrYM4x7gJNlqRrFBbMxNPfyvWD5lk7AjE5ug+HOX18jFG9A==
Received: from prod-mail-ppoint4 (a72-247-45-32.deploy.static.akamaitechnologies.com [72.247.45.32] (may be forged)) by m0050102.ppops.net-00190b01. (PPS) with ESMTPS id 42xkspfu19-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 22 Nov 2024 15:13:43 +0000 (GMT)
Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.18.1.2/8.18.1.2) with ESMTP id 4AMDDBKT001284; Fri, 22 Nov 2024 10:13:42 -0500
Received: from email.msg.corp.akamai.com ([172.27.50.200]) by prod-mail-ppoint4.akamai.com (PPS) with ESMTPS id 42xqm1ppbt-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 22 Nov 2024 10:13:42 -0500
Received: from ustx2ex-dag4mb4.msg.corp.akamai.com (172.27.50.203) by ustx2ex-dag4mb1.msg.corp.akamai.com (172.27.50.200) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.11; Fri, 22 Nov 2024 09:13:41 -0600
Received: from ustx2ex-dag4mb4.msg.corp.akamai.com ([172.27.50.203]) by ustx2ex-dag4mb4.msg.corp.akamai.com ([172.27.50.203]) with mapi id 15.02.1544.011; Fri, 22 Nov 2024 07:13:41 -0800
From: "Salz, Rich" <rsalz@akamai.com>
To: Andrew Campling <andrew.campling@419.consulting>, Yaron Sheffer <yaronf.ietf@gmail.com>, Peter Gutmann <pgut001@cs.auckland.ac.nz>, Sean Turner <sean@sn3rd.com>, TLS List <tls@ietf.org>
Thread-Topic: [TLS] Re: Adoption call for TLS 1.2 Update for Long-term Support
Thread-Index: AQHbO3F/lxIhNJluyEC/IDdj9+iiQLLBC0qAgAKQboCAADrOgIAAE7WA//+zZoA=
Date: Fri, 22 Nov 2024 15:13:41 +0000
Message-ID: <7ED45639-4DAC-47ED-A6E5-BDD91D5E1085@akamai.com>
References: <278163DF-0CB8-472F-84CB-0B8236FEC7C1@sn3rd.com> <231D5F24-E1AE-4F7C-9860-F6B0FF79D6FF@akamai.com> <CWXP265MB5153A14B88F7E5CC94E9BF9AC2212@CWXP265MB5153.GBRP265.PROD.OUTLOOK.COM> <67DD955A-3D13-E04F-9398-F5B37786F79A@hxcore.ol> <ME0P300MB0713FDE4AAA6BB169D676391EE232@ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM> <1A650921-0180-864F-A50B-E385FAC59653@hxcore.ol> <LO2P265MB5160EA88E5389CDE7036F465C2232@LO2P265MB5160.GBRP265.PROD.OUTLOOK.COM>
In-Reply-To: <LO2P265MB5160EA88E5389CDE7036F465C2232@LO2P265MB5160.GBRP265.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.91.24111020
x-originating-ip: [172.27.164.43]
Content-Type: multipart/alternative; boundary="_000_7ED456394DAC47EDA6E5BDD91D5E1085akamaicom_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1057,Hydra:6.0.680,FMLib:17.12.62.30 definitions=2024-11-22_07,2024-11-21_01,2024-09-30_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 phishscore=0 mlxlogscore=979 spamscore=0 suspectscore=0 bulkscore=0 mlxscore=0 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2409260000 definitions=main-2411220127
X-Proofpoint-ORIG-GUID: 6Bjctm6k-N510rYmAXupjefUbFHcQNzB
X-Proofpoint-GUID: 6Bjctm6k-N510rYmAXupjefUbFHcQNzB
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.60.29 definitions=2024-09-06_09,2024-09-06_01,2024-09-02_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 impostorscore=0 lowpriorityscore=0 phishscore=0 bulkscore=0 adultscore=0 mlxlogscore=798 priorityscore=1501 spamscore=0 clxscore=1011 malwarescore=0 mlxscore=0 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2409260000 definitions=main-2411220128
X-MailFrom: rsalz@akamai.com
X-Mailman-Rule-Hits: implicit-dest
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
Message-ID-Hash: DOG2Y3W2RZVFEXTMNBLFNUU736EH5JTV
X-Message-ID-Hash: DOG2Y3W2RZVFEXTMNBLFNUU736EH5JTV
X-Mailman-Approved-At: Fri, 22 Nov 2024 12:09:49 -0800
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Adoption call for TLS 1.2 Update for Long-term Support
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/l6ayY_PGj2_p274fF9qojzqQH0c>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

If the consensus view of the working group is that the existing communications have resulted in mixed messages and some confusion, the adoption of TLS LTS could provide a useful vehicle to address that whilst also dealing with the various technical points that Peter has already identified in his draft.  By expanding the introduction plus sections 3.7  and 4 (or by adding a new section), it should be possible to communicate clearly to implementers and others the relative positions of TLS 1.2, TLS-LTS and TLS 1.3 with reference RFC 9325 and any other relevant documents etc.

This makes sense to me.

v2.29.0 | Report a Bug | By Email | System Status