Re: [TLS] Products supporting TLS 1.0 & some other high-level questions

[Eric Rescorla <[e-mail]>]

On Sun, Oct 5, 2014 at 7:22 PM, Watson Ladd <[e-mail]> wrote:

> Is the prefered path
> -Adoption of TLS 1.3
> -Adoption of TLS 1.2+session_hash fix
> -Indefinite support for TLS 1.0 plus multiple, not widely deployed fixes.
>

As a practical matter, we're likely to get at least the first two and
probably all three.


The other high level question is tying to X509. The current draft
> requires the server and client to be identified by X509 certificates.
> While this repeats what previous versions have done, X509 is not a
> perfect match for all uses.


As you probably know, there are TLS documents which allow for both
PGP (RFC 6091) and for raw keys (RFC 7250). I haven't studied the
matter, but I expect that they are compatible or can be made compatible
with TLS 1.3. For obvious reasons, we'll likely need to retain X.509,
but we can certainly reference/update these documents or merge them
in if people really want to.

-Ekr