Re: [TLS] TLS Charter Revision

[Watson Ladd <[e-mail]>]

I strenuously object to the proposed rechartering as it now stands.
First, I do not have confidence in this WG and its chair to
deliver a secure protocol to the IESG. They did not the previous 3
times, and I do not want to give them a 4th shot without some
guarantee
of the quality. Secondly, the proposed recharting has made certain
technical decisions related to the protocol without due discussion, in
particular
the list of goals implies that we keep the stupidity of multiple
ciphersuites and extensions galore around. Thirdly, the experience of
TLS 1.2 teaches us that no matter how compatible a protocol upgrade
is, it will not happen, and so one need not keep compatibility.
Fourthly, item 3 is not strong enough: AtE needs to die a fiery death
and nothing short of killing RC4 will address its shortcomings.

I propose the following charter instead.
"To create a protocol establishing a secure encrypted and
authenticated channel in the standard model between parties A and B,
supporting the following authentication methods:
-One-way authentication with the PKI
-Two-way authentication with the PKI
-Two-way authentication with a shared low-entropy secret
-One side authenticated with the PKI, and the other with a shared
low-entropy secret.
Said protocol will function over UDP and TCP with a minimum of
handshakes, complexity, and options, and will have a formal security
proof."
Sincerely,
Watson Ladd