Re: [TLS] I-D Action: draft-ietf-tls-prohibiting-rc4-01.txt

[Bodo Moeller <[e-mail]>]

>
> > Maybe the spec should have strict MUST NOT requirements for TLS

> 1.2, but make mere recommendations for the legacy protocols?
>
> No, not sure I follow your reasoning here:


If you're not using TLS 1.2 but an earlier protocol version, then obviously
backwards compatibility is of concern (and there's really no non-crappy
cipher suite available). It seems that you can get by without RC4 when
using TLS 1.2, but obviously sites do still see a need to support RC4 with
older protocol versions.


Regarding obsolete ciphers such as RC2 and DES, I don't think the need
> to prohibit them is quite as urgent, because people aren't actually
> using them in the wild. (Well, not _many_ people, anyway.)
>
> I would indeed support their deprecation - but perhaps in a separate
> document, as I'm concerned that any unnecessary delay with this one


Fair enough.

Bodo