IETF Logo Mail Archive

Re: [TLS] [EXTERNAL] Re: supported_versions in TLS 1.2

Yaron Sheffer <yaronf.ietf@gmail.com> Mon, 29 November 2021 21:49 UTC

Return-Path: <yaronf.ietf@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDEB23A0A80 for <tls@ietfa.amsl.com>; Mon, 29 Nov 2021 13:49:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level:
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rleGq1gmhNZb for <tls@ietfa.amsl.com>; Mon, 29 Nov 2021 13:49:36 -0800 (PST)
Received: from mail-ed1-x529.google.com (mail-ed1-x529.google.com [IPv6:2a00:1450:4864:20::529]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F8283A092D for <tls@ietf.org>; Mon, 29 Nov 2021 13:49:36 -0800 (PST)
Received: by mail-ed1-x529.google.com with SMTP id t5so78260132edd.0 for <tls@ietf.org>; Mon, 29 Nov 2021 13:49:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:date:from:subject:thread-topic:in-reply-to:message-id :references:to:cc:content-transfer-encoding; bh=QLIbwUTALs38585Ljw0pXt9jP/lNG2F2BX3MBNCohEg=; b=oKxaDQdH3QsY1LUsIc4kWhvuOhZhu/jBhzK7oeNHlxn+rc08nXu40Dr5A+MP8UO7H2 i1WEgQSstu0m3SbMrjfpDbOjAjiN2SE+pbxjsJwsWB7QlespPbFVWwBw1POgyNSILIRu 8iFoVnPDgDY/4fbU+jF77JL/TvbQVcogaqnYST3tyIHGYP13fWjdhA72epNRtQQGYO1h ICa1e6ww6a5nXgJxpI4kg4zhQlEaObQ/Iq8AZCttIBZZcKn9po9/0/yFQWbnMsYNNDR5 SEKg9ZYbwhdXR2O12VD6zq2zU+wBxMfAOmMfBpyfMCzEPTnSp4RYwhR+E/aBOK+JuR16 O6JQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:date:from:subject:thread-topic :in-reply-to:message-id:references:to:cc:content-transfer-encoding; bh=QLIbwUTALs38585Ljw0pXt9jP/lNG2F2BX3MBNCohEg=; b=yRk3vAcof730Bv1p2RvJi2TeYEfMVQpjAc5iXW/u0lUMIFhrIJKe/L1wMmYzpgjcLK 4BKQeywzvyMbrAEl20Xp+xU2wS/P2SFJaSBeFUhDiE1/drh+zu89S0iuUrA9D5PbsoJp mIWAABLARqzo6Rs6KjexXHD9B6sX6EQncwAzgXQI6qE7EsdDJOvhPFTWXrRvg0DOyVRk OtSMv9F1WjC/xHaN6Suv0mvKgdPhV9T28F98DV5+b0MEkenV7DrG7bbf5wOTvpRM0cjt 3j70595Xx/BZMzLXutHCqDk+iBSjuC1jX0ZNgKGshBA5isDmuwMf3uwzYqkpzZpPgwBu dSJg==
X-Gm-Message-State: AOAM533yBhd82UaASMFvFg22/5wxYgk3e1Da7GuZ8e6CwGVBN2CANMby BZcVmNmneVdFqcfQi7ffdyHEir1oicg=
X-Google-Smtp-Source: ABdhPJy0FgEInfStgHkNi71U3pmJGg6NTIFKtXV4N3lEfb+XjYNvulOKFkO/NCrGRjylWKN7uUVqng==
X-Received: by 2002:a17:907:3f07:: with SMTP id hq7mr62217547ejc.420.1638222573152; Mon, 29 Nov 2021 13:49:33 -0800 (PST)
Received: from MacBook-Pro.local (IGLD-84-229-147-189.inter.net.il. [84.229.147.189]) by smtp.gmail.com with ESMTPSA id oz31sm7991024ejc.35.2021.11.29.13.49.32 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 29 Nov 2021 13:49:32 -0800 (PST)
MIME-Version: 1.0
Date: Mon, 29 Nov 2021 23:49:28 +0200
From: Yaron Sheffer <yaronf.ietf@gmail.com>
Thread-Topic: Re: [TLS] [EXTERNAL] Re: supported_versions in TLS 1.2
In-Reply-To: <c2da83c1-0fb4-e55a-202b-a245e24df706@mozilla.com>
Message-ID: <8473527F-F1D0-1D4D-BB77-48DDFED4C5F6@hxcore.ol>
References: <cba86b0d-5100-05c0-e7d6-8cbe6abc0c92@mozilla.com> <31aab4dd-46d6-d62b-0116-c7e6cc307b85@mozilla.com> <CAF8qwaCJeGAWhX8RoDGuU54M6OP70ZqK6MqF_kaiGq0b50eJ_w@mail.gmail.com> <SY4PR01MB6251973DFBF3D3535FE3CEFAEE9A9@SY4PR01MB6251.ausprd01.prod.outlook.com> <5C1F59E5-EB9F-4888-BF1B-DE26B4B99CD1@akamai.com> <1d249bd4-6774-1235-f875-08ae526f8c2f@mozilla.com> <CAF8qwaBfG2K8EDy3VGFy_PF1bkVEFtj+x7euzZea2_r72Rnm-g@mail.gmail.com> <5289476D-ADAA-4049-8300-5D67BA20314A@akamai.com> <SY4PR01MB6251FEEB0EB5C3432CB0E08CEE619@SY4PR01MB6251.ausprd01.prod.outlook.com> <CAChr6SyXci75qs9x+08JG3dN54rUTRnTbSfFnHwGXqxAQQZ23A@mail.gmail.com> <SY4PR01MB6251A4FF3B6C64908FBD8C31EE619@SY4PR01MB6251.ausprd01.prod.outlook.com> <bca48e15-6fe3-4a37-b8c9-d09dab1fe3c7@www.fastmail.com> <CABcZeBO053kC15WrfnT3yu7MZqW0XaNSYsygqGzxm5uqGu3ROg@mail.gmail.com> <CAChr6SzjWvAy3qadTPiMnmeBBo2x4kE4QV5jsC3=DWNvRUtYtQ@mail.gmail.com> <MN2PR00MB0719BBC1242F5D0BDF62F2498C669@MN2PR00MB0719.namprd00.prod.outlook.com>, <c2da83c1-0fb4-e55a-202b-a245e24df706@mozilla.com>
To: Peter Saint-Andre <stpeter@mozilla.com>, Andrei Popov <Andrei.Popov=40microsoft.com@dmarc.ietf.org>
Cc: "TLS@ietf.org" <tls@ietf.org>
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/lILXRhATDpThluDoTsVS9LPIu_c>
Subject: Re: [TLS] [EXTERNAL] Re: supported_versions in TLS 1.2
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Nov 2021 21:49:41 -0000

On 11/29/21, 22:40, "Peter Saint-Andre" <stpeter@mozilla.com> wrote:

On 11/29/21 11:29 AM, Andrei Popov wrote:

> Perhaps I missed some part of this thread, but it’s still not clear to

> me what would be the purpose of adding supported_versions extension to a

> TLS 1.2 implementation? What problem(s) would that solve?

 

Based in part on discussion here, we (the authors of 6125bis) concluded

 

Typo: should be 7525bis (the TLS BCP).

 

[1] that we don't need to recommend adding the supported_versions

extension to TLS 1.2-only implementations.

 

If folks find that decision problematic, do let us know.

 

Peter

 

 

_______________________________________________

TLS mailing list

 

v2.46.0 | Report a Bug | By Email | System Status