IETF Logo Mail Archive

Re: [TLS] Fwd: Last Call: <draft-ietf-kitten-tls-channel-bindings-for-tls13-09.txt> (Channel Bindings for TLS 1.3) to Proposed Standard

Sam Whited <sam@samwhited.com> Sun, 03 October 2021 01:29 UTC

Return-Path: <sam@samwhited.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43BE53A08FB for <tls@ietfa.amsl.com>; Sat, 2 Oct 2021 18:29:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.101
X-Spam-Level:
X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=samwhited.com header.b=TMZ6bj/Y; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=RrpeweEh
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8K81alIQM33r for <tls@ietfa.amsl.com>; Sat, 2 Oct 2021 18:29:34 -0700 (PDT)
Received: from wout3-smtp.messagingengine.com (wout3-smtp.messagingengine.com [64.147.123.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74AB73A08FA for <tls@ietf.org>; Sat, 2 Oct 2021 18:29:34 -0700 (PDT)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.west.internal (Postfix) with ESMTP id 1914D32009BE; Sat, 2 Oct 2021 21:29:32 -0400 (EDT)
Received: from imap42 ([10.202.2.92]) by compute1.internal (MEProxy); Sat, 02 Oct 2021 21:29:32 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=samwhited.com; h=mime-version:message-id:in-reply-to:references:date:from:to :cc:subject:content-type:content-transfer-encoding; s=fm1; bh=6v e4j339te5cAOwUem2YkaDQShA9Qhu3cWxakjTTcZg=; b=TMZ6bj/Y/H12rKvmbM tHhUsHgudAFWf1jLtII+uy/hWWlTYrz4I1ksWb1SDeBDM1yFUMUTUrHs5QX0w1hQ 1J8vnTF9yCcu0U/j62nblLkSNQSImxE5Ns8L2rCo9rzacda739R+R1f9F3A3dKvJ dmKyNMa27wXxLH2ATOu/nrM70I/6V2tDpS1I7TgK4yB2aZMbVDnsUeOTZ0Wqdgcy MEA2YkaxczJMmyokjTL3d2bDJwwR2imlUc9tWyRfyywEQAL6hb54fITM+5K/0nQc viVFuHexTi/sEUMRE7wFYqXP6r9b37/HQbNEJpsy3vdKxLxA50E1VIZHz2At7Bkr /05g==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=6ve4j339te5cAOwUem2YkaDQShA9Qhu3cWxakjTTc Zg=; b=RrpeweEh3yqrBn9N8tdCgfzlfCGldhuuQH9Cb9TBI9OPOchRuDg/ZUMxC XgoceKMXMT5p0ezSJkhVQxw2zpiezZWav7hrp/B2MCfV+Cmtv4mvsNrO9WGN9h3R E/sRdb+3MDIdTrWojTpQHIVVlJpUpd0n1LW8iexVdsT1ab4lSIPF1+CSwoz4xy2r o6/bG3Dl3wEqg2JCHe2umn0BVcZSjaRut4x2NFTkP37YkJvFpSpcZo4MeEAfL97l RMpNnrPAOsJVQCPLQHqtfREBPHyMtoSZqqEEItZmxHCt6t06CDvepR7eidJkXSOP LoXOacawSOatXfh8rY70LViygMv8Q==
X-ME-Sender: <xms:ewdZYXpIJ6xEPjxY3jYRsHv2fpvUcrSsIzmdV83VWDIrfp-sMhUGdg> <xme:ewdZYRqURXzQ9-6pHIY9dMMgohHwlcMJsNK15PWyNaaLiPYWnUSb5itu-v_LlF1sw 8btE2ZMDDNp0hlFRg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekledggeejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepofgfggfkjghffffhvffutgfgsehtqhertderreejnecuhfhrohhmpedfufgr mhcuhghhihhtvggufdcuoehsrghmsehsrghmfihhihhtvggurdgtohhmqeenucggtffrrg htthgvrhhnpedvffeuvdduhfefvdeiheeukeffhfekjeevgffggedtlefhhffhieevkedu vefhjeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpe hsrghmsehsrghmfihhihhtvggurdgtohhm
X-ME-Proxy: <xmx:ewdZYUPDB3hycM-qrvZLHm8wUEQV9t-eEzy3mJtcuMVyX2QTwwwTBQ> <xmx:ewdZYa7BY3X_68mrIbXLPBMzpKvjvvnU3NvMP7v5ocZMl0Q0wWiSMg> <xmx:ewdZYW6PJ0gT8HAuaeenQaUCDqRzqP-PS02p_tveuvDgbpkn8gT-LA> <xmx:ewdZYbjlQkk8r4vI3vI7R2M-M1KJJzKGLXIASusVNkClUTH6StqIlg>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 84A702180075; Sat, 2 Oct 2021 21:29:31 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.5.0-alpha0-1322-g921842b88a-fm-20210929.001-g921842b8
Mime-Version: 1.0
Message-Id: <c4d6f2e5-0712-42a6-aef5-0cbada7e149e@www.fastmail.com>
In-Reply-To: <CABcZeBNo0gKjNZOKPYJYraioaw6G=z5ibTqh-o9GkWsDkfDmSQ@mail.gmail.com>
References: <163311243544.13917.11736165165419008870@ietfa.amsl.com> <20211001190002.GC98042@kduck.mit.edu> <CABcZeBPQG82xJdwMrmj4-=9aJymo1xts=D6VZedBW5X9k+34cQ@mail.gmail.com> <92ed26c1-bfde-43c1-93f4-2bbdbd4f6ec1@www.fastmail.com> <CAChr6Sw6Rs42DfS8KgD3qasPcWM_gGZhWN5C4b7W7JsPy0wDzw@mail.gmail.com> <8796f867-12b8-41f8-b124-82b3ab0e2d32@www.fastmail.com> <CAChr6SyKAnBcE9t68coGGXFt9WPLuDuWtVKoCXrK+QrwAVtPXw@mail.gmail.com> <f1bcd676-13ad-49b3-a8e8-8a272e0124e3@www.fastmail.com> <CABcZeBNo0gKjNZOKPYJYraioaw6G=z5ibTqh-o9GkWsDkfDmSQ@mail.gmail.com>
Date: Sat, 02 Oct 2021 21:29:11 -0400
From: Sam Whited <sam@samwhited.com>
To: Eric Rescorla <ekr@rtfm.com>
Cc: Rob Sayre <sayrer@gmail.com>, "<tls@ietf.org>" <tls@ietf.org>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/oZZsQUvBt5qS2ZVdn338xRwva7s>
Subject: Re: [TLS] Fwd: Last Call: <draft-ietf-kitten-tls-channel-bindings-for-tls13-09.txt> (Channel Bindings for TLS 1.3) to Proposed Standard
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 03 Oct 2021 01:29:39 -0000

Even if linking this in updates implied confidence (though I don't think
it does), TLS alread implies confidence in its own EKM mechanism. I
don't believe this document expands on that. For example, it does not
detail any particular use of channel binding.

—Sam


On Sat, Oct 2, 2021, at 13:12, Eric Rescorla wrote:
> I want to be clear that I don't think this is about credit. My concern
> is purely about accurately reflecting the level of confidence one
> should have in this mechanism.

v2.23.0 | Report a Bug | By Email