IETF Logo Mail Archive

[TLS] Re: Additional uses for SSLKEYLOGFILE entries

Stephen Farrell <stephen.farrell@cs.tcd.ie> Thu, 27 February 2025 14:18 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 691AE2CBB28 for <tls@mail2.ietf.org>; Thu, 27 Feb 2025 06:18:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietfa.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietfa.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bca42QtAfr4F for <tls@mail2.ietf.org>; Thu, 27 Feb 2025 06:18:16 -0800 (PST)
Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2139.outbound.protection.outlook.com [40.107.22.139]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id BB0C32CBB07 for <tls@ietf.org>; Thu, 27 Feb 2025 06:18:16 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ENKTug/Sg6K9RsqV9jGrF+t34GaBACssxPn5NgYAJHpNzBek3zDAaZqj0nn9yEzJPjtF6zJKDTgjbM4hBZ/wo+42I1Z9A0akvOWXq4G7uRlEM4LHQX9WkaJ+WJI55rKPDkqI77yS1yvWX+SCjaPbluMGlg61+P6N7Q47OM/8aWQuwq43FGPsFjChbiIRk57sQA/Xy9u4CnQWLOMqn7MO968tC8Uyuec47jpb/IiF+ARWw3EMYGHFXSj2Zt1ejorKXp4wND1QBq7u0P2vEeQJ2JkIVKbGrycB4yTDTrZcESCjPOHWCi8Kc6+N0ogqtIRK7j+5FDqTMVNGuy4yqCD4LA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=hzGNOVDCNsY7Z4xIIos1G1IfdXw8VZl4mIW5AIqtCoc=; b=Zes+RMZpQS2fxJ5QzIWcWqh2hhR+/Blcfxri/ZDu33bZa68hptXPPyhmrISGiDtuXgG9tAtYxf1RzjbLI9hJWJVDNvpEbJHpwsfNvK21u0LuYjFhv3lLZNaceWwv4g8W2+CtBSDJWRiCr+A638IPq2dDnri/6ZlmwwNt0qCCxdm7SGW/t/ILiTp2UIzSx3qoV/gGB0UCpy0vNjHR4UFRTnqZOn/gcLsz+xfNLvXBbkAIbyiojWIAb2eaTqXO3YqQh2qHOCmQxuuTgisevUlO1oj4laD8Sj3ILdE1m8dGpiTPwnK/4ElNm3AHcg4Z/oRUsy+Hy3mDdc+R35j9kdlIyg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hzGNOVDCNsY7Z4xIIos1G1IfdXw8VZl4mIW5AIqtCoc=; b=o9+TebEC9wh/23kWF/iurzwQtWnxSx0Hd0MbK3HGiZM0Xik/m4LjhVCwslhfx2jDgiudoJVS5/mbaKoyd7gSDjQ19x+R2xEPGGVyl9KcuVD/cLwiHryFPbvGUe0ZpsoU4k+OC/gVmLzfz1ynUcx1dgOFDeReHNxPM1Mq88k0odZ9nGOiFuQEo5xEgKliNfO+rxExBbrn7Xa0GxVknh4jFAXKZADB7hHJCkXQWy6npv2ks5bYTVIlyoJTckXYei7MC5aQAWi9TN0tLB3XXMI6Oneab46KRI4YkLh8Q04LA4PFfiAZqokwnNVt5fQ1xTMBEZZyT9aZZvrQ/XkqVNl+uw==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16) by DU0PR02MB8388.eurprd02.prod.outlook.com (2603:10a6:10:3b4::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8489.22; Thu, 27 Feb 2025 14:18:14 +0000
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a]) by DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a%3]) with mapi id 15.20.8489.018; Thu, 27 Feb 2025 14:18:14 +0000
Message-ID: <c56b7f35-9e27-438c-8614-fbef23a024b4@cs.tcd.ie>
Date: Thu, 27 Feb 2025 14:18:12 +0000
User-Agent: Mozilla Thunderbird
To: "Sipos, Brian J." <Brian.Sipos@jhuapl.edu>, "tls@ietf.org" <tls@ietf.org>
References: <f49006e2f9d24cf8ba855b29d7bea925@jhuapl.edu>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <f49006e2f9d24cf8ba855b29d7bea925@jhuapl.edu>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------jARdBLM2pAdEnxU5Z0HAcucZ"
X-ClientProxiedBy: DUZPR01CA0025.eurprd01.prod.exchangelabs.com (2603:10a6:10:46b::13) To DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB8PR02MB5946:EE_|DU0PR02MB8388:EE_
X-MS-Office365-Filtering-Correlation-Id: dfdc3131-d207-4f4c-2c78-08dd57399250
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|366016|376014|1800799024;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB8PR02MB5946.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(366016)(376014)(1800799024);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: dfdc3131-d207-4f4c-2c78-08dd57399250
X-MS-Exchange-CrossTenant-AuthSource: DB8PR02MB5946.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Feb 2025 14:18:14.1065 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: gewnehae43kRp8P4NaAmZmGTq+nqAJyaqgG2UqP/nAs5yBFi/ODmpaCqf1l2VMuf
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR02MB8388
Message-ID-Hash: JV5IWYSL2WXAUGUX5XQ5OCGJBZKKDUYD
X-Message-ID-Hash: JV5IWYSL2WXAUGUX5XQ5OCGJBZKKDUYD
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: Additional uses for SSLKEYLOGFILE entries
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/vnuF_6G8S3lw_TZLwLOo3ZHiQww>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Hiya,

On 27/02/2025 14:10, Sipos, Brian J. wrote:
> 
> Is there any fundamental objection to eventually allocating labels
> specifically for EDHOC use?

 From my POV yes: fundamentally it is a bad idea for
the IETF to standardise ways to exfiltrate keys
even if there may be innocuous uses for those. And
this latest ask (extending the exfiltration from
being a TLS-only thing, to cover other protocols
such as EDHOC) IMO nicely demonstrates the danger
of the TLS WG publishing this document.

Cheers,
S.

v2.46.0 | Report a Bug | By Email | System Status