IETF Logo Mail Archive

[TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Format for TLS

"Bellebaum, Thomas" <thomas.bellebaum@aisec.fraunhofer.de> Thu, 20 February 2025 09:13 UTC

Return-Path: <thomas.bellebaum@aisec.fraunhofer.de>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B1C6C14F6F4 for <tls@ietfa.amsl.com>; Thu, 20 Feb 2025 01:13:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.303
X-Spam-Level:
X-Spam-Status: No, score=-4.303 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=aisec.fraunhofer.de header.b="UY7p4tsY"; dkim=pass (1024-bit key) header.d=fraunhofer.onmicrosoft.com header.b="ccv0GTzc"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HQDwstjrA0wd for <tls@ietfa.amsl.com>; Thu, 20 Feb 2025 01:13:21 -0800 (PST)
Received: from mail-edgeMUC218.fraunhofer.de (mail-edgemuc218.fraunhofer.de [192.102.154.218]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7975C14F6BC for <tls@ietf.org>; Thu, 20 Feb 2025 01:13:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=aisec.fraunhofer.de; i=@aisec.fraunhofer.de; q=dns/txt; s=emailbd1; t=1740042801; x=1771578801; h=from:to:subject:date:message-id:mime-version; bh=i4qmLwrhTamnGHWz7t9eDnuLX3H4NyAkIuu4mNJTow8=; b=UY7p4tsYFZu69NkokzKitaS5Zteo2/K76DDYGao7rl+4wjscraol4urD hWT0jOZdxN3z7DJWWLrJ/dsEM0+BJWI+C3kjBHAl0t6WW6C2P8SkzdpWf 6UW6ewdE0D/Qmtzan36V3S/LstrXfewkR7LLywW0QhyJTAmpfgtVQd7YE cVebiKhMvcMRQYcJuxS1dHS8PqmHb9s+lz+smUDtQx3pxHAoSzua9dOlJ qaGa3CstIkY4yp7XjAiARuWEpLUCdSe8VmxRSRwlbUIfhgrdqYSFhp7Je 12b7x+SR3y8xZH0uKj6IUtnN3WlTjDlOk92YaR6+zns2MOn8uyTngEmAV g==;
X-CSE-ConnectionGUID: xTH/D0MeSoqistMiyLg5/g==
X-CSE-MsgGUID: PP5rHRHdTiyRLuH7zZXQpQ==
Authentication-Results: mail-edgeMUC218.fraunhofer.de; dkim=pass (signature verified) header.i=@fraunhofer.onmicrosoft.com
X-IPAS-Result: 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
IronPort-PHdr: A9a23:9mhvhhbqwy5oO/wzqyHvnzD/LTF90YqcDmcuAucPlecXIeyqqo75N QnE5fw30QGaFY6O8f9Agvrbv+f6VGgJ8ZuN4xVgOJAZWQUMlMMWmAItGoiCD0j6J+TtdCs0A IJJU1o2t2ruKkVRFc3iYEeI53Oo5CMUGhLxOBAwIeLwG4XIiN+w2fz38JrWMGAqzDroT6l1K UeapBnc5PILi4lvIbpj7xbSuXJHdqF36TFDIlSPkhDgo/uh5JMx1gV1lrcf+tRbUKL8LZR9a IcdISQtM2kz68CujhTFQQaVz1c3UmgdkUktYUDP7ET7Ao70ljTgttZ03S+1HfLkEqxlVBik8 oNbEz+0rjYuNB8k7T3SrO5Mi70L9UHExVR1loXfftm6COh1d7/NYcMddDNRQMtDaDNzXomVd 6QdCecPHr5Ij6b+ikBQnwrnJViMB+flkWNUhlnb1IYx1LwtPV7Y51QDG84/73L9rvGkKpwLe r2X07HT8m/Ya99Y5RLD96iLSzsl4tCjRbJ0Q9bBzhE/FBHgknSMsIfrH22qibkgqkXF1slPa sm2tEcY9DlQjSaBw+IrmKzOiMUQyHnvyBd/54wSCoCoQxVHUIv3WIsVtjudMZNxWN9nWWxzp SImn6UPooXoFMBr4JEuxhqaZvCIfq21yUi6BKCfOz5lgnJidr+lwRq/ogCsyez5A9G9y00C7 jFEnd/Fqm0X2lTN59KGRPpw8gbp2TuG2w3JrOARCU4unLfdK5kvz6R2kZwWsE/ZGTTxllmwh 6iTHng=
X-Talos-CUID: 9a23:J14ZFGo7/lxJYldaiCGaTEDmUdAZUjrxlFLdGEihCH11bbyEbVDNv6wxxg==
X-Talos-MUID: 9a23:ppPDTw7WAYYuXMxEexfwpq1IxoxQ2/m0KHotnakHqvOgKAwvKQWttSyOF9o=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="6.13,301,1732575600"; d="p7s'346?scan'346,208,346";a="7743553"
Received: from mail-mtaka26.fraunhofer.de ([153.96.1.26]) by mail-edgeMUC218.fraunhofer.de with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 20 Feb 2025 10:13:13 +0100
X-CSE-ConnectionGUID: ucv8oG5PRKSLTgF+F2Lzfw==
X-CSE-MsgGUID: 2PsPA104Rbm92GJ86vaQTA==
IronPort-SDR: 67b6f229_xa2KLLRD7j2+e6CjPqfvGS8bJGSeteCjVMomRdmNnmR6Ky1 zua+oDcBBOESXH7ZlIU0bjeGvA4Ivf0Pi+F2vGg==
X-IPAS-Result: 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
IronPort-PHdr: A9a23:7HcSCRPhWbDyq4G5RBkl6nZKDBdPi9zP1nM99M9+2PpHJ7649tH5P EWFuKs+xFScR4jf4uJJh63MvqTpSWEMsvPj+HxXfoZFShkFjssbhUonBsuEAlf8N/nkc2oxG 8ERHEQw5Hy/PENJH9ykIlPIq2C07TkcFw+6MgxwJ+/vHZXVgdjy3Oe3qPixKwUdqiC6ZOFeJ Qm7/z7MvMsbipcwD6sq0RLGrz5pV7Z9wmV0KFSP2irt/sri2b9G3mFutug69slGA5W/Wp99Y KxTDD0gPG1w38DtuRTZZCek5nYXUTZz8FJCA13EsAj/eojrshfzs+xS+BaIYtGnQJwyRBCSt Ic3bg7BiwYaKmI81kPrjdMg2fE+wlqr8hd03db7XJOePeZuYrPaTIoKW2dTYdljCyZoGqyua YYBLLIRHclbgpKjlUpXjUqeBg2mX7/zyhllj1T92vU2/7s/Klnl2BARQNQnslCFsu7sH/owT viu8/PTyRnNU9Zoxhe+0aPMMTEOufGIb65gdpLBylsKCyLZl16eidLaYG64z8lTiku00MF5a suQ1FYGhB9fpx2o1OIrhM7MhKs+92LC0i9e79slLoaEeRsoKc7hEYFXsTmdLZczWM45XmV07 T4z0aZV0XbaVC0DyZBiwgLWSNXdLc6G+Bv+UuaWLzpiwn5oK/qzhBe3pFCp0fa0FtK131BDs jdfn5HSu2oM2R3e5onPSvZ08kq7nzfa/w7J4/xCIUc6mLCdLJgkw7UqkYEUv1iFFSjz8Hg=
IronPort-Data: A9a23:hiHiB6A/vLNZFBVW/x3mw5YqxClBgxIJ4kV8jS/XYbTApD8n0mMDx mNMDGnUb/zcamTyLt5/aoS38UJUuZ/cyN8yOVdlrnsFo1CmBibm6XR1Cm+qYkt+++WaFBoPA /02M4SGcYZvCCeG+n9BC5C5xVFkz6aEW7HgP+DNPyF1VGdMRTwo4f5Zs7dRbrVA357gWGthh fuo+5eCYAX/g2YtWo4pw/vrRC1H7KyaVAww4wRWicBj5Df2i3QTBZQDEqC9R1OQapVUBOOzW 9HYx7i/+G7Dlz91Yj9yuu+mGqGiaue60Tmm0hK6aYD76vRxjnBaPpIACRYpQRw/ZwNlPzxG4 I4lWZSYEW/FN0BX8QgXe0Ew/ypWZcWq9FJbSJSymZT78qHIT5fj6+hlEhExEtAgwMVMJV1B2 782chQfYA/W0opawJrjIgVtrt8mMNGtMZMUujdu1zjEC/YhT53ZBanHjTNa9G5t3YYfQrCHO JtfMGAwBPjDS0Un1lM/FJI5me6zwHPydzlVoluIoII+4nPex0p/yrHwNtrSdNGQA8lY9qqdj juZoT+gXEBCXDCZ4WC96UqF37eTpyn+Cdg9Nu3m6PdTvHTGkwT/DzVTDzNXu8KRlkqlc9NSN 0JS/TAhxZXe72TyE4K4DkL9+SHV+0dGBJxOFqsxrg+Xw7fS4wGXC3JCQjMphMEaifLajAcCj zeht93zDCFpsLqbRGjb8bGRrDioPjMSI3NEbigBJTbpKfG6yG3qpkuXEYYxI73/ldDvBzD7z haDqSV01f1ZjtcG2+//tRrLii6l7MqBBAMkxBTlbkT85CNAZamhe9OJ73rf5q1+N4q3dASKk 0UFvMm819owK6+xuhaDe8g3J4Hx1c25aGXdpXVNA6ge8y+c/i//XIJIvxB7CkRbEucFXj7LO Eb86B9g1LpODX6UdqVYXYOAO/o29IfODd+/aPLwa+hfU6hPaQaorSRcVW+N7U/QkWwHs6I2C bGEe+mCUFcYDqVeyQStTcgj0I4b+Dwa7knuTL+q0yWX9LuQX2GUQrE7K2mzbvg1waeHgQfN+ fBdPNuu5zQGd8OmeQjR04oYDW5SHEgBHZqs9vBmLL+SEDRpCEQKKqH3w4p4X6dHgq4MtOPD3 k/la39i0FCl2EH2c1SbWEtCNoHqc410908gHCoWOl2t5XgvTKCv4IobdLo1ZbMXz/Ni/9ElU 8g6f9i8PdoXRgTl4zg9abzPnL5mfjmvhiOMOHOBSxo7dJhCWQfI24HFei3CySowNRe05PAO+ +CY6gDmQJQ4V1tDCuTSY6mR1F+fhyUWt99zeErqGeNtXnvQ3rJkERGssc9vEfowcU3C4hC4y zepBQwpoLiRgo0tr/jMq6O2j6aoNOpcRkN1TnXq3ZOrBCzk5WCM/45xYNiURB/zTGiuxqeGY NdE/sHCLfQozVN4g6thIZlWzIYVxdjml5lFxCtKQVTJaFWKDOt7A3+khMNgiIxE9oV7iyCXB H2dy4J/AqqYHv/lHHo6BhsXXs7a2d46wjDtvOkIemPk7ypJzZ+7eER1PSjUrhdCLbFwYbgX8 c14tOE4swWA2wcXaPCYhSVp9kOJHHwKc4Mjkro4WIbLqA4a+mtuUKzmKB3dwc+wMo1XE0wQP DWrqrLIhO1cymr8YnMDLyXx8tQHt6semiJh7QEkHEuIqOrnl/Vs/Rx28BYLdCp34ChD8dpOP jlMCxUoC4SIpyxllepSbVCKQgthPiCUymb16lkOlVDacXWWa3zwHDU9F9qgrEE92EBATwdf5 4CdmTrEUy61XcTf3RkSeE9Cqt7xR+xL6SnHppyWRcuYLZ8YYTba36ikP1gMoBq6AvEKpVbmo NNy971acpzLNi83oow6BbKF1L8Wdgu2GWxaTdxl/4ILBWv6ejqi/RSvcmefIthsId7O+m+GU /1eHNpFDUmC5XzfvwIlCr4pCJ4quvwQvf4pWK7hfEwCuJuh9gtZiorarHXCtTV6UudVsJgPL 63KfGi/CU2Wv3xfnlHNoORiOmaVZdolZhX27Nuq8dcmRo4yj+VxTX4cireEnW2ZEA9CzSKmu AnuY6z3zes77a9Om4DqMLtIBiTqCNfVedmLzjuOsIV1XYuSCfvNigIblAC2dUAed74cQM9+m rmxocb6lhGN9qo/V2fC3YKNDe9V7MG1R/BaKd/zMGIcpyaZRcvw+FEWzghU83CSfA91vaFLn zeFVfY=
IronPort-HdrOrdr: A9a23:bOf8y6iX1snQvYEFN6wsJY7233BQX1113DAbv31ZSRFFG/FwyP rAoB1L73PJYWgqNU3I+OrwdJVoJEmzyXcb2/h2AV7PZniEhILsFvAY0WKA+UyuJ8SdzJ8l6U 4IScEXY7eQbWSSz/yKmDVQe+xQh+Vvm5rY4Ns2uk0dKj2CHJsQizuRZDzrcHGebTM2eKYRJd 653I5qtjCgcXMYYoCQHX8eRdXOoNXNidbPfQMGLwRP0njBsRqYrJrBVzSI1BYXVD1ChZ0493 LergD/7qK/99mm1x7n0XPJ5Zg+oqqh9jIDPr3NtiEmEESvtu+aXvUlZ1S2hkF3nAn0gGxa7O Uk7S1Qe/iboEmhBF1d6SGdpDUIlgxerUMKgGXo/0cK9KTCNUIHItsEioRDfhTD7U08+Nl6za JQxmqc84FaFBXagU3GlpP1vjxR5wOJSEAZ4KYupm0aVZFbZK5arIQZ8k8QGJAcHDji4IRiFO V1FsnT6PtfbFvfNhnizyRS6c3pWm52EgaNQ0AEtMDQ2z9KnGphx09dwMAEhH8P+J80VpEB7e XZNaZjkq1IU6YtHOhALfZERdHyBn3GQBrKPm7XKVP7FLsfM3aIsJLz6KVd3pDdRHQhpKFC66 goeTtjxB8PkoLVeLqzNbFwg2TwqT+GLEbQI+lllu1EhoE=
X-Talos-CUID: 9a23:03eyrmFxt3Cwm5mdqmJ6/1BEHe94Skf+91PsLGH7JzxNWrOKHAo=
X-Talos-MUID: 9a23:Lqsu/AYPvOcTJuBT7Qf3vBg7bJtS6aH/Um8vwcsYsvC4HHkl
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="6.13,301,1732575600"; d="p7s'346?scan'346,208,346";a="17631690"
Received: from 153-97-179-127.vm.c.fraunhofer.de (HELO smtp.exch.fraunhofer.de) ([153.97.179.127]) by mail-mtaKA26.fraunhofer.de with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 20 Feb 2025 10:13:12 +0100
Received: from XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) by XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.11; Thu, 20 Feb 2025 10:13:12 +0100
Received: from FR6P281CU001.outbound.protection.outlook.com (40.93.78.3) by XCH-HYBRID-04.ads.fraunhofer.de (10.225.9.46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.11 via Frontend Transport; Thu, 20 Feb 2025 10:13:12 +0100
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=NFk98xj5XjkkjEI4gBApawKpx72gw+a1Y0KCtLVCZV9UWZxVd8TusiJs1cboTPIJqWb0PMCzlHRFnUVDMFXaZ7/kCZFISlkpZXDWD3dv/WH6PLnT8pqlhGEZlpotTB2N6DZbn8XBdz9E1aKNFAahL/Y0LNZ2+Wz90Bn84LdiE5A7saj6xgNuaKEa5FADUJj7WocW3ko6w4xZaFIQp3m2ZVyzhTfvnxyz7T5kKaeMtASC5ZoDAjtt4H8WsXfEMNEmwSXYR355hg/Sm7bX4jIoacXXlGNDduznLeLuOuLJDWJJ93HpDkmpo1Hqiw/EPSRa3CjLa8TP8d/6eKi5MGxpmQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=i4qmLwrhTamnGHWz7t9eDnuLX3H4NyAkIuu4mNJTow8=; b=TmZvj3toCae0tWZFD7UnRSxjU7N1idA7eThHouw4ZIcmvaKMPu3oHDaHBraf0SJ7rg866bbiWblPhHJAC4TcxCsrP21Ax7fHvDyNrnqNMdpVKeLTtexMzNBKHjlYtVevNdNwv29LaM6vXQnijz80jNFiqSvLbWUXLMtEKMDMgGADa8yTHxXwjcZYJoINprZYChIFhHRuZQvLUC9TrjIXMlA2YRXAIFgpcBmSZ2R15w+c2TDGTW07AF+8HvWN0iKpmAT007iY1ozSNlSbzjXDEUG+DIpS0iLQRr9lFQ1N7RW0WWFkxBXuClhIsUKbFqqrsU5yQASCVTPdjgrSKBoMkg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=aisec.fraunhofer.de; dmarc=pass action=none header.from=aisec.fraunhofer.de; dkim=pass header.d=aisec.fraunhofer.de; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fraunhofer.onmicrosoft.com; s=selector2-fraunhofer-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=i4qmLwrhTamnGHWz7t9eDnuLX3H4NyAkIuu4mNJTow8=; b=ccv0GTzcatxtxoY1xvezWwZ4bApGznefK0xHGkEs6Zy1H9Hklb34thNEaCco0dD7vS0KltY7nAjL9vSqC5JwpsW2slDfTMVwH+QCl+IGphlZtxo0xkzMtItqcfH6W75EqE6QKGWCqWAW7PIGvFmMozMof/mjACUZnObOG5xc3TY=
Received: from FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d18::f66) by FR4P281MB3762.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:db::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8466.16; Thu, 20 Feb 2025 09:13:08 +0000
Received: from FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM ([fe80::c703:bde1:d68c:b748]) by FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM ([fe80::c703:bde1:d68c:b748%3]) with mapi id 15.20.8466.015; Thu, 20 Feb 2025 09:13:08 +0000
From: "Bellebaum, Thomas" <thomas.bellebaum@aisec.fraunhofer.de>
To: "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] 2nd Working Group Last Call for The SSLKEYLOGFILE Format for TLS
Thread-Index: AQHbg3enEin4dv1ltkuaWzrvdw8YBA==
Date: Thu, 20 Feb 2025 09:13:07 +0000
Message-ID: <6a27cae41645539b3fa90b5f83a8973c73cdd6a0.camel@aisec.fraunhofer.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: FR1PPF809320EF6:EE_|FR4P281MB3762:EE_
x-ms-office365-filtering-correlation-id: 823eb527-b4c4-4210-09d5-08dd518eca85
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|1800799024|4053099003|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(1800799024)(4053099003)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; micalg="sha-256"; protocol="application/pkcs7-signature"; boundary="=-Bie9Oi7RfshYU+AP0PN8"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: FR1PPF809320EF6.DEUP281.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 823eb527-b4c4-4210-09d5-08dd518eca85
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Feb 2025 09:13:07.8711 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f930300c-c97d-4019-be03-add650a171c4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: pWD3xbr3HCuw99DtoV/Vr1Kutx6UQ60ueIJyFXafweLitiRthihtxUupxbYAnn5jcVtxf8l52+vrnZpBXz4hNq8G348RXGvD5UbCy8E/30Bvz1ewy2eEXEaQIn53tpM9
X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR4P281MB3762
X-OriginatorOrg: aisec.fraunhofer.de
Message-ID-Hash: GYB4B4L2EGWYQVY3T33BG4FFI56EZP4Q
X-Message-ID-Hash: GYB4B4L2EGWYQVY3T33BG4FFI56EZP4Q
X-MailFrom: thomas.bellebaum@aisec.fraunhofer.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Format for TLS
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/nnqmXWtuBUD7W5NOkB57BYk723c>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hello,

I have just become aware of this draft and I believe there might be a good cautionary addition I would like to propose:

Specifically, I am worried that with further encouragement to standardize this format, it will become a convenient way to surveil unsuspecting end users. All this requires is "some" access to the system, for many implementations this includes setting an environment variable. What an attacker gains is then something more reliable, machine-readable (and in many cases useful) than a simple keylogger.

The problem here (in my opinion) is the word "unsuspecting". I would like to see an addition to the draft along the following lines:

> A TLS application interacting with an end-user (e.g. a browser) MUST clearly communicate any requests to log TLS secrets to the user and MUST NOT indicate a secure connection.

Otherwise, this draft looks fine to me.
Thanks for your efforts,

Thomas

-- 

```
M.Sc. Thomas Bellebaum
Applied Privacy Technologies
Fraunhofer Institute for Applied and Integrated Security AISEC

Lichtenbergstraße 11, 85748 Garching near Munich (Germany)
Tel. +49 89 32299 86 1039
thomas.bellebaum@aisec.fraunhofer.de
https://www.aisec.fraunhofer.de

```

v2.46.0 | Report a Bug | By Email | System Status