Re: [TLS] TLS Paris Interim Minutes

Let me also clarify the following point from the minutes:

> The construct presented by Hugo was from the SKEME paper published in
'91: http://webee.technion.ac.il/~hugo/skeme-lncs.ps

I referred to the paper when answering the question of whether this is a
new design. I said that a similar design goes back to the above paper (from
NDSS'96 not 91) which had actually many of the same motivations than the
current proposal (PFS, identity protection, a uniform treatment of
pre-shared key and re-key, etc). On the other hands, there are some
significant differences in the new proposal such as the support of 0-RTT
and server-only authentication. In cryptography little changes can
introduce vulnerabilities so OPTLS needs to be considered as a new design
for the sake of analysis (and there are important details to be nailed
down, especially the key derivation definitions).

Hugo

On Thu, Nov 6, 2014 at 1:06 AM, Sean Turner <turners@ieca.com> wrote:

> On Nov 05, 2014, at 09:56, Bodo Moeller <bmoeller@acm.org> wrote:
>
> > Adam Langley <agl@google.com>:
> > On Wed, Nov 5, 2014 at 4:49 AM, Bodo Moeller <bmoeller@acm.org> wrote:
> >
> > > This isn't correct, and isn't what was said at the meeting. As
> discussed at
> > > the meeting, YouTube currently allows two cipher suites for video
> streams,
> > > TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_RC4_128_SHA, but
> Firefox
> > > doesn't support the former without ECDHE
> > > (https://bugzilla.mozilla.org/show_bug.cgi?id=1029179).
> >
> > Some locations additionally support ECDHE_RSA_AES_128_GCM_SHA256,
> > which we are testing now.
> >
> > Yes, but the above is about correcting the 2014-10-21 minutes, not
> updating them to reflect the current status.
> >
> > Bodo
>
> I’ll make sure these get updated.
>
> spt
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>