Re: [TLS] CCS and key reset and renegotiation

[Viktor Dukhovni <[e-mail]>]

On Thu, Jun 05, 2014 at 11:09:30AM -0400, Salz, Rich wrote:

> Have folks seen this yet?
>   http://ccsinjection.lepidum.co.jp/blog/2014-06-05/CCS-Injection-en/index.html
> 
> I think it adds weight to my concern about using ChangeCipherSpec
> to do key reset.  I still prefer the trade-offs of having a "slow
> the TLS but keep the TCP layer open" and starting over.  Much
> simpler to prove it's correct.

A STOPTLS feature could also be useful in the Postfix (TCP) connection
cache.  Because cached TCP connections move between processes
through file descriptor passing, but serializing the SSL state of
an active SSL connection is difficult, we currently can't cache
TLS-protected TCP connections.  If we could STOP TLS before moving
connections into the cache, and resume with a handshake over
cleartext (using a cached TLS session, session ticket, ...) that
would make it possible to cache TLS connections (that negotiate
TLS 1.3 if STOPTLS is a required or negotiated peer feature in
1.3).

-- 
	Viktor.