Re: [TLS] Confirming consensus: TLS1.3->TLS*

Andrey Jivsov <crypto@brainhub.org> Mon, 21 November 2016 09:04 UTC

Return-Path: <crypto@brainhub.org>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6489129889 for <tls@ietfa.amsl.com>; Mon, 21 Nov 2016 01:04:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mhgAAnMfg8oF for <tls@ietfa.amsl.com>; Mon, 21 Nov 2016 01:04:05 -0800 (PST)
Received: from resqmta-po-08v.sys.comcast.net (resqmta-po-08v.sys.comcast.net [IPv6:2001:558:fe16:19:96:114:154:167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C7D8129892 for <tls@ietf.org>; Mon, 21 Nov 2016 01:03:50 -0800 (PST)
Received: from resomta-po-10v.sys.comcast.net ([96.114.154.234]) by resqmta-po-08v.sys.comcast.net with SMTP id 8kVscDEkA2dNj8kVxc3HPr; Mon, 21 Nov 2016 09:03:49 +0000
Received: from [192.168.0.10] ([24.5.144.109]) by resomta-po-10v.sys.comcast.net with SMTP id 8kVwcHMGIgtO48kVwceI5i; Mon, 21 Nov 2016 09:03:49 +0000
Message-ID: <5832B873.4080608@brainhub.org>
Date: Mon, 21 Nov 2016 01:03:47 -0800
From: Andrey Jivsov <crypto@brainhub.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: tls@ietf.org
References: <CF83FAD0-B337-4F9E-A80B-2BAA6826BF41@sn3rd.com>
In-Reply-To: <CF83FAD0-B337-4F9E-A80B-2BAA6826BF41@sn3rd.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
X-CMAE-Envelope: MS4wfK3iWCB1afOmib3lsOkLRy4TA2i0FMmXzRKGCnr/0N6QJowQ4eRXUbNHaI0WX1rWDThrNwi0Hit/ttvzCPMkh1a0eCIDGZ+dMYk7U7P+FeRDGpC8EJyF VJ3Tak+sWg+v6lFJnO1wyOD8NqKeRKP2Cjm6NnpYrx8/PshbANJ1nHQe
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/rXelUY_DwdG18w4zdNWtSyCQ58k>
Subject: Re: [TLS] Confirming consensus: TLS1.3->TLS*
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Nov 2016 09:04:08 -0000

On 11/17/2016 06:12 PM, Sean Turner wrote:
> At IETF 97, the chairs lead a discussion to resolve whether the WG should rebrand TLS1.3 to something else.  Slides can be found @ https://www.ietf.org/proceedings/97/slides/slides-97-tls-rebranding-aka-pr612-01.pdf.
>
> The consensus in the room was to leave it as is, i.e., TLS1.3, and to not rebrand it to TLS 2.0, TLS 2, or TLS 4.  We need to confirm this decision on the list so please let the list know your top choice between:
>
> - Leave it TLS 1.3
> - Rebrand TLS 2.0
> - Rebrand TLS 2
> - Rebrand TLS 4
>
> by 2 December 2016.
>
...

TLS 4.


TLS 1.3 introduces major changes to message flow and substantial 
redesign of crypto.

I will respectfully remind that earlier this year the WG has made a 
decision to break backward compatibility with large number of devices by 
rejecting an option to extend allowed in TLS 1.3 RSA PKCS#1.5 signature 
padding scheme to all portions of the handshake. The solution was that 
these peers must keep using TLS 1.2 
https://www.ietf.org/mail-archive/web/tls/current/msg19360.html .

Changes of this magnitude are not typically associated with a "dot" 
release.

+ what other said on confusion with SSL. I don't see this one as a big 
deal, but I will go with the consensus of "4.0" v.s "2.0". "1.3" is the 
worst choice here.