IETF Logo Mail Archive

Re: [TLS] The future of external PSK in TLS 1.3

Achim Kraus <achimkraus@gmx.net> Tue, 29 September 2020 16:30 UTC

Return-Path: <achimkraus@gmx.net>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BF103A0EFC for <tls@ietfa.amsl.com>; Tue, 29 Sep 2020 09:30:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gmx.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M4cK5Nypu5RV for <tls@ietfa.amsl.com>; Tue, 29 Sep 2020 09:30:37 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 738713A0F35 for <tls@ietf.org>; Tue, 29 Sep 2020 09:30:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1601397032; bh=yC265n6VxXpp5BK6DgcUzQZsOf/i3Y/SP/M7YsO74yA=; h=X-UI-Sender-Class:To:From:Subject:Date; b=Qig4aiCy0oh755HJv+d4hitZFSRRg8Mdyvo1zPb3O64BuMp8KFDGbbwJaaUPPOlXJ ybCv/kMjXa2P3nfPXEUJLtDK0Xq4hknjxl7OiWcuaHut2BFJgvDeKSh7losjRT1CH+ Jc3D4y2yF36JxSR2kExO3QffOt1jpr2j761aGBLU=
X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c
Received: from [192.168.178.100] ([178.2.235.159]) by mail.gmx.com (mrgmx105 [212.227.17.168]) with ESMTPSA (Nemesis) id 1M8ykg-1kJTJ82Bvi-0064Cc for <tls@ietf.org>; Tue, 29 Sep 2020 18:30:32 +0200
To: "tls@ietf.org" <tls@ietf.org>
From: Achim Kraus <achimkraus@gmx.net>
Message-ID: <a4d46445-945d-d5fb-7d64-8688bf5abcab@gmx.net>
Date: Tue, 29 Sep 2020 18:30:32 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:pOt01ODTwBvq8S0r+Y6KuR8wDXy6DOb82WTm/dOJwroBbNIyql+ DCSTmBYlK229UuxHSPyhXSMUsP+xbHLi/faCOH2ThBXBWaMluCjqG4TZy+e15YLxwVWhNxg x0IH3PrsyFaBExOeMBp/2UtRmcatOB7E3NGGVvd89kGsTNvoNKixnYNGmZ3HugeJwtB2Ndy zFp9h/eItd7GQ7r5axtMg==
X-UI-Out-Filterresults: notjunk:1;V03:K0:m3PD1HJlgb0=:xFhUh1F80K0OxJ+3OLQRNf CJMxZQpsDHqzBjiwLvsExJ7Xs5enu5KeBMh7rK4rFm/Uo/PIanobRP/zn3zTSBCIfyJI4lwpS XBlJGvUSM4h5mJyifm3VQV2XowWPAwWHwR7KL9ACdZTx/69pEHUnLLCghNRNvvbg/I2XMC/pk XaU+el7FAgA2ulF2mMMbqPe6JWuHjjm4Cmv9qrmkhUq6DwyJ5najjUgTFONaQdOgb98oCURFM NFRNTiVkE1pA6H309M14KdhEWJaC1SU0/xl15weAsgijvWkcyqH9MsDpCx+H5zxwD8XvOFrPW MsS4rg6dmQ2Pvy6jcO+j7kl2Bk9JTX+7M3lh2TdI2Y9hQmTrnxuZ/85MftV28r/t3hr7VHs7J fSAkFs+0m6RFtDJ9y1DuNyetD9GWOaoFGTL+ZqcQ7M7eDv/5pa4mbiNgo54K1Q/tbN7y6ajRI L2a2BzaBEwN85kI6opsAGX3e2HkD37YQYCuTQRSKqQ2TongqKOubbTS0uFfLj4AK1v5g+Q7rX hnUOh5k27U7zb0c2OYQOZo1TVE4TxTT0dn5+Rl/bMB5zzJrdqLhPwbyG7IYhuDy9R0wIoB7Fm hnIdAGPh1egxMAPAK7VNEGYXtbx+kCBWzle9eB1TkQ9Anq/TOPnwMK1HzIvAo5kC+5D/YdGCJ sMUVtvTDRJj59MVx5TNPVbL6SZbQt1OcVFOpDnccm8z5fz2bxTwjd8OYoT8pgN4DhSAbLeX5I GVuO/yW7ioaOZFB2WjsErOHbHVMDS0YdQZoP0/6JQ1jvAUmcFScVoyA1u7iJEgIIb9pZfBIUk LYCqrQvbdE9YAZAgZMHSNi9JSIx+NVuTQVYFyzSnHjpJWiRzyCC0WuW7ZBdIEc9wd2eOcBGPN YA10g8C5lBiXRQt/X37lmcHbCFYRW/pQbgVw3MilyRUi30m96BDrCVeDIRYOfw0JTUV+QAZYE LlLK1UnQ21oa8y16ejeQDvHBYRhLGPPLIUfachSiFOWYNom1y6vGnMd4dBfMz4VcgKTtuyDvU SoN6RJh4oAnMwwo0fFQGZgWeexqkynWti/zh0kc39idmrSmQAcS10x5rBw9B+YAdXTzSWmeN2 Syf0dS1cSilk0qBV5Qr4fLFCoFwVyZNPao57hULuTNxZFIPPrstoU1HUep/7wScWh9QSR3oZu uv2D1YeW2bUfzgvOal5VwOPl8qFceiCa5m/xJPZNiBpMF+6L53Y/8UDPojeiucZ4pErMd4aFM hf815JwEhsMQBbF4M2tuavao0YyTy6jXZtXcsLg==
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/pY6JDDb_WxBfgGbYh15vCS7sQQQ>
Subject: Re: [TLS] The future of external PSK in TLS 1.3
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Sep 2020 16:30:38 -0000

Hi list,

I'm still worrying about the "recommended" and the (mis-)interpretation
of that. I'm fine with the explanation

---------------------------------------------------------------
Note

     If an item is not marked as "Recommended", it does not
     necessarily mean that it is flawed; rather, it indicates that
     the item either has not been through the IETF consensus process,
     has limited applicability, or is intended only for specific use
     cases.
---------------------------------------------------------------

but, I feel uncomfortable considering too many decision makers will not
read that details. Though the "recommendation" is changing over the
time, I would feel more comfortable, if the N would be amended by the
Y-period.

e.g. N (was Y 2001-2015)

FMPOV, if someone reads that, it may explain, that the N is a recent one
and some use-case will still need some time to adapt for the new
recommendations.

best regards
Achim Kraus

v2.23.0 | Report a Bug | By Email