Re: [TLS] New draft: draft-rescorla-tls13-new-flows-01

[Kurt Roeckx <[e-mail]>]

On Wed, Feb 19, 2014 at 02:24:48PM -0800, Martin Thomson wrote:
> You could put half of the first round trip in DNS, but that's a fairly
> major change to the protocol.  Note however that the ServerParameters
> described in the draft is something that could be discovered through
> other channels, definitely.  No one is checking where
> PredictedParameters came from, just that it is correct.

I'm not saying that it's the only way, but it could be a way that
some sites might want to use.  I also think this doesn't add any
additional RTT on DNS, you can run 2 or more queries at the same
time.

> On 19 February 2014 14:10, Kurt Roeckx <[e-mail]> wrote:
> > The only reason I can find in your document is to prevent replay,
> > but I currently don't see how this is a problem.
> 
> If I had any reason to believe that your first flight included
> non-idempotent HTTP requests of interest to me (e.g., transfer $X to
> account Y) then replay protection is extremely interesting.

I was only looking at this from the client side for some reason.
At the server side I ussually deal with this at the application
level instead.


Kurt