Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.1 deprecation

Peter Gutmann <pgut001@cs.auckland.ac.nz> Tue, 01 October 2019 22:21 UTC

From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: "hannes.tschofenig@gmx.net" <hannes.tschofenig@gmx.net>, 'John Mattsson' <john.mattsson=40ericsson.com@dmarc.ietf.org>, "TLS@ietf.org" <TLS@ietf.org>, "saag@ietf.org" <saag@ietf.org>
Thread-Topic: [TLS] Lessons learned from TLS 1.0 and TLS 1.1 deprecation
Thread-Index: AQHVdGRuT2dEqLFcbEmEm2g+1AcjWadE9+mAgAFsGw8=
Date: Tue, 01 Oct 2019 22:20:57 +0000
Message-ID: <1569968457142.91354@cs.auckland.ac.nz>
References: <03B5BDAC-5B17-47B2-85D0-225DCCABDC42@ericsson.com>, <024b01d5785d$51b3d7d0$f51b8770$@gmx.net>
In-Reply-To: <024b01d5785d$51b3d7d0$f51b8770$@gmx.net>
Accept-Language: en-NZ, en-GB, en-US
Content-Language: en-NZ
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/o0yTn3TIpP5OM47SOl-5y2ZT-xA>
Subject: Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.1 deprecation
Precedence: list

hannes.tschofenig@gmx.net <hannes.tschofenig@gmx.net> writes:

>IMHO the problem with deprecation is not in the IETF but rather with the deployments.
>
>PS: As Kathleen noted TLS 1.2 and DTLS 1.2 are perfectly fine if you follow
>RFC 7925/7525.

Maybe the text could be updated to have one section of text for the web and
one for everything else, since they're totally, totally different
environments.  I was at a meeting last week to discuss upgrade mechanisms for
some globally deployed infrastructure and they were looking at a 2-3 year time
window to start the upgrade process, with completion by 2030 at the latest.

That's not a typo for 2020, it's 2030.

So the text needs to acknowledge the two different operating environments, the
web where you can replace anything you want at a drop of a hat, and the rest
of the world where it takes serious effort to make the change.  Moving from
TLS 1.0 to TLS 1.2 with EMS/EtM/LTS within ten years, for the non-web world,
is a practical goal.  Moving to an entirely new protocol in that time frame
(TLS 1.3) probably isn't going to happen.

Peter.

[TLS] Lessons learned from TLS 1.0 and TLS 1.1 de… John Mattsson
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Salz, Rich
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Kathleen Moriarty
Re: [TLS] [saag] Lessons learned from TLS 1.0 and… Michael Richardson
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Daniel Migault
Re: [TLS] [saag] Lessons learned from TLS 1.0 and… Daniel Migault
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Martin Thomson
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Stephen Farrell
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Daniel Migault
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Martin Thomson
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Stephen Farrell
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Daniel Migault
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Simon Bernard
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Salz, Rich
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Eric Rescorla
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Salz, Rich
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… David Benjamin
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Benjamin Kaduk
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Stephen Farrell
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Daniel Migault
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… John Mattsson
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… John Mattsson
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Kathleen Moriarty
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Kathleen Moriarty
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… hannes.tschofenig
Re: [TLS] [saag] Lessons learned from TLS 1.0 and… Michael Richardson
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Daniel Migault
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Peter Gutmann
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… John Mattsson
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Christopher Wood
Re: [TLS] Lessons learned from TLS 1.0 and TLS 1.… Hannes Tschofenig