Re: [TLS] Consensus Call on MTI Algorithms

On 02/04/15 12:50, Yaron Sheffer wrote:
>> On 1 April 2015 at 17:46, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:
>>> AES-256-GCM and SHA-384. Doesn't it make sense to have them as SHOULD,
>>
>> I don't see much point.  All involved likely know if they need
>> something that strong, which is way down there in the "we might need
>> it someday" category [1].
>>
>> [1] http://www.keylength.com/en/3/
>>
> 
> The TLS BCP is IETF consensus, not just one person's opinion. If people
> deploy stuff based on our recommendations, we should ensure that it is
> still available to them when they migrate to TLS 1.3.

But isn't it likely we revise the TLS BCP once TLS1.3 is done and
implementations start to become common? We can make sure things
all add up at that point in time, and are in-whack with what people
are deploying, but we don't necessarily need to do so now I think.

S.

> 
> Thanks,
>     Yaron
> 
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
> 
> 