IETF Logo Mail Archive

Re: [TLS] Fwd: Last Call: <draft-ietf-kitten-tls-channel-bindings-for-tls13-09.txt> (Channel Bindings for TLS 1.3) to Proposed Standard

Sam Whited <sam@samwhited.com> Sun, 03 October 2021 13:37 UTC

Return-Path: <sam@samwhited.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 185AF3A0989 for <tls@ietfa.amsl.com>; Sun, 3 Oct 2021 06:37:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=samwhited.com header.b=SaO+YWl2; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=PVLWboXo
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ENEMRNN6MPsx for <tls@ietfa.amsl.com>; Sun, 3 Oct 2021 06:37:25 -0700 (PDT)
Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D2173A0981 for <tls@ietf.org>; Sun, 3 Oct 2021 06:37:24 -0700 (PDT)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id ED5FF5C00E4; Sun, 3 Oct 2021 09:37:23 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Sun, 03 Oct 2021 09:37:23 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=samwhited.com; h=date:from:to:cc:subject:in-reply-to:references:message-id :mime-version:content-type:content-transfer-encoding; s=fm1; bh= xC/dxxhE7pNQGzku2Kq4EpCXoJYHNB/tjwuaDG5/AMo=; b=SaO+YWl2oZ75N9PF 1xcaSBg8W8N9l+RyZ5/mTZkoqdMk3RUsFUtpEa/q9NYOJ7EWrpevn/KjO8yE9SEC udinrcbqyX0zi/jg/2jjMTnd/HLVf8tMWOrlwrCo/1oj1LP0jepD2eCcHs9lawsm Nt5r0BjSQQXspmNJ0n7KhK4TCxAdwzwGzsJ3fW5+HARTK2Y1ozSiSI63nqQlQvK6 4YW1LsiyCoWNwMdvxaVI+KEGo5L9td6jHDkP+GddCHbrWUZBTPfK7R3JU2/lqqNR F6TegdM1mxALi6rhqM+cWNemyHiqIerqtxEzcJGWh4Xxsn7CvhcezlWdtdYX/F1M tGkedQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=xC/dxxhE7pNQGzku2Kq4EpCXoJYHNB/tjwuaDG5/A Mo=; b=PVLWboXo6RFXhVaJopN94smsJSrDKBQhOLi89MecHfq2MD05DaCaZITMw v9FqxO9McEDoZ5TM65eJc2tFIKOJCBaCQ4ikMcq7UnSYOxyJGjTvSr41bkp+dkZT A0cj0rqOlDJhKPLhzSiYD1uY1iuMevx4mL82ALZVV81cwuyV7zpV8lfytrTDS43V rUVaWl5s0m7HQzDCrT3mitTs+F2t2SXQh2CblwYAvhZKU7u0cK7LL7dpBUD+lLdg Esvg91B7GzCQ2geH7FFvCr42lcQ9tR+egk2ebsByS/bwoEePYMHbVRQLwpyV+04y 912DwaaT+UEpo6vA760GhkcqceRgg==
X-ME-Sender: <xms:E7JZYdiC_4PDbYeDyc9hUoGkcXkvNIWCZmYYGyk5ER8RriAYYv0X-g> <xme:E7JZYSDibvo32R4THDQyLDwvv7yYDB-Mz_Kcq68FcGjEjhRBn-JZH6ixXGS1LA4u7 vGbIzQzhmTu94_bxg>
X-ME-Received: <xmr:E7JZYdFfP23dlbJ2M4R1zpGtyJc7zoTzpwzpyqq9IwghoomVFjtaW9I68A>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudeltddgieehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffujghfkfggtgfgsegrjehmredttdejnecuhfhrohhmpefurghmucgh hhhithgvugcuoehsrghmsehsrghmfihhihhtvggurdgtohhmqeenucggtffrrghtthgvrh hnpedtgefffeduieduudeuffehudeuvedtveevhfejteeftdeuhedtheehteegffeiffen ucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehsrghmse hsrghmfihhihhtvggurdgtohhm
X-ME-Proxy: <xmx:E7JZYST-oEtxyCcqvmyPWPf4nu9ayHJ0NOPIxuTi4uGW7OiJ7znpIw> <xmx:E7JZYaxRVJUTT7IkLUD8G4vGDMxDzNVOr0EGhWJXkkCdpFs97tqX4Q> <xmx:E7JZYY7qvUn7jy74SVcED0yA5XqLwmZB8wB4t0wYYAyVHScvrkhBHw> <xmx:E7JZYfopJPD2CRRZTNgZrHRsMXFGiFHBAYwVejpJ1EWG3WoSoVqUCQ>
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 3 Oct 2021 09:37:23 -0400 (EDT)
Date: Sun, 03 Oct 2021 13:37:17 +0000
From: Sam Whited <sam@samwhited.com>
To: "Salz, Rich" <rsalz@akamai.com>, Rob Sayre <sayrer@gmail.com>
CC: "tls@ietf.org" <tls@ietf.org>
In-Reply-To: <2B09D295-EDB1-4011-9FFE-ACFAE2BEEE88@akamai.com>
References: <163311243544.13917.11736165165419008870@ietfa.amsl.com> <20211001190002.GC98042@kduck.mit.edu> <CABcZeBPQG82xJdwMrmj4-=9aJymo1xts=D6VZedBW5X9k+34cQ@mail.gmail.com> <92ed26c1-bfde-43c1-93f4-2bbdbd4f6ec1@www.fastmail.com> <CAChr6Sw6Rs42DfS8KgD3qasPcWM_gGZhWN5C4b7W7JsPy0wDzw@mail.gmail.com> <8796f867-12b8-41f8-b124-82b3ab0e2d32@www.fastmail.com> <CAChr6SyKAnBcE9t68coGGXFt9WPLuDuWtVKoCXrK+QrwAVtPXw@mail.gmail.com> <f1bcd676-13ad-49b3-a8e8-8a272e0124e3@www.fastmail.com> <2B09D295-EDB1-4011-9FFE-ACFAE2BEEE88@akamai.com>
Message-ID: <3C125BB7-D0C5-4E5B-80A0-C17EB7BB0558@samwhited.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=----3Z8W9DMJMHRY60G011X57PDWGS5539
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/o47Jkd2Zq-jU3xCFQ66VQvdgGyw>
Subject: Re: [TLS] Fwd: Last Call: <draft-ietf-kitten-tls-channel-bindings-for-tls13-09.txt> (Channel Bindings for TLS 1.3) to Proposed Standard
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 03 Oct 2021 13:37:31 -0000

I'd be okay with that provided we can release an update if such an analysis is ever done?

Although this is such a low-stakes issue that I worry that the prejudicial value of such a statement far outweighs the security value. I don't feel strongly about it though.

—Sam

On October 3, 2021 1:06:40 PM UTC, "Salz, Rich" <rsalz@akamai.com> wrote:
>Perhaps adding text that says no security analysis has been done.
>
>

v2.8.7 | Report a Bug | By Email