Re: [TLS] TLS 1.3 process

"Dan Harkins" <dharkins@lounge.org> Sun, 30 March 2014 01:57 UTC

Return-Path: <dharkins@lounge.org>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74C0D1A0416 for <tls@ietfa.amsl.com>; Sat, 29 Mar 2014 18:57:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.867
X-Spam-Level:
X-Spam-Status: No, score=-3.867 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZOpiB-MPDuS4 for <tls@ietfa.amsl.com>; Sat, 29 Mar 2014 18:57:31 -0700 (PDT)
Received: from colo.trepanning.net (colo.trepanning.net [69.55.226.174]) by ietfa.amsl.com (Postfix) with ESMTP id 44E621A040E for <tls@ietf.org>; Sat, 29 Mar 2014 18:57:31 -0700 (PDT)
Received: from www.trepanning.net (localhost [127.0.0.1]) by colo.trepanning.net (Postfix) with ESMTP id 3F821A888012; Sat, 29 Mar 2014 18:57:28 -0700 (PDT)
Received: from 69.12.173.8 (SquirrelMail authenticated user dharkins@lounge.org) by www.trepanning.net with HTTP; Sat, 29 Mar 2014 18:57:28 -0700 (PDT)
Message-ID: <5e873b6dee53a2ba2cbce891c1dc43dc.squirrel@www.trepanning.net>
In-Reply-To: <r422Ps-1075i-79F48DD7DFE8403FACC8EC802CBC0B8C@Williams-MacBook-Pro.lo cal>
References: <r422Ps-1075i-79F48DD7DFE8403FACC8EC802CBC0B8C@Williams-MacBook-Pro.local>
Date: Sat, 29 Mar 2014 18:57:28 -0700
From: Dan Harkins <dharkins@lounge.org>
To: Bill Frantz <frantz@pwpconsult.com>
User-Agent: SquirrelMail/1.4.14 [SVN]
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/ufHCfftjfr2JW7viukt5Epjt-uM
Cc: tls@ietf.org
Subject: Re: [TLS] TLS 1.3 process
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 30 Mar 2014 01:57:32 -0000

  Hi Bill,

On Sat, March 29, 2014 3:49 pm, Bill Frantz wrote:
> One place where IMHO, the process is lacking is in having a set
> use cases to test our proposals against. With use cases, we can
> more easily avoid the tendency to Baroque and Rococo interfaces
> by asking how a particular feature supports one of our use
> cases. The proposer can either answer how it supports an
> existing use case, or propose a new use case which does support.
> Than new use case can be either added or rejected by the group.
>
> It seems to me obvious that two use cases we must support for
> TLS are:
>
>    HTTP
>
>    Mail (POP, SMTP, IMAP)
>
> Are there any others?

  See /etc/services. Basically, everything that uses the transport layer
should be able to use transport layer security if it wants to.

  I think we should avoid to the fullest extent possible having application
layer use cases to guide TLS 1.3 development. The less the application
layer intrudes onto TLS the better. (I think NPN/ALPN is architecturally
a bad idea).

  regards,

  Dan.

> I don't know much about the real-world uses of DTLS, so others
> will have to propose DTLS use cases.
>
> Cheers - Bill
>
> ---------------------------------------------------------------------------
> Bill Frantz        | Re: Computer reliability, performance, and security:
> 408-356-8506       | The guy who *is* wearing a parachute is
> *not* the
> www.pwpconsult.com | first to reach the ground.  - Terence Kelly
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>