Re: [TLS] Should TLS 1.3 use an augmented PAKE by default?

Andy Lutomirski <luto@amacapital.net> Wed, 19 March 2014 16:38 UTC

MIME-Version: 1.0
In-Reply-To: <5329C2FD.2040909@gmail.com>
References: <53288C43.9010205@mit.edu> <5328B6DF.8070703@fifthhorseman.net> <5328C0C8.9060403@mit.edu> <6b79e0820d349720f12b14d4706a8a5d.squirrel@webmail.dreamhost.com> <CALCETrV7_j3dLuaUeQ1pXM=fkrO9Q9svHSC=MaOXQA1nvAQHFQ@mail.gmail.com> <5329C2FD.2040909@gmail.com>
From: Andy Lutomirski <luto@amacapital.net>
Date: Wed, 19 Mar 2014 09:38:13 -0700
Message-ID: <CALCETrUC7GzeL5T10wFncdHY=MWbxbKn-4WCmYMYB7WSdcv8Cw@mail.gmail.com>
To: Anders Rundgren <anders.rundgren.net@gmail.com>
Content-Type: text/plain; charset="ISO-8859-1"
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/xpHKhUiZd24Tr7aQXmfVDbGIv6c
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Should TLS 1.3 use an augmented PAKE by default?
Precedence: list

On Wed, Mar 19, 2014 at 9:17 AM, Anders Rundgren
<anders.rundgren.net@gmail.com> wrote:
> You want something like this?
> https://communities.intel.com/community/itpeernetwork/vproexpert/blog/2012/05/18/intel-ipt-with-embedded-pki-and-protected-transaction-display
>
> Petty yucky stuff IMO.

My copy of Thunderbird already has a perfectly usable password prompt.
 For applications like that, no password prompt change whatsoever
would be needed -- Thunderbird would just need to know which IMAP
servers use PAKE.  (This might be very easy -- Thunderbird already
autoconfigures for various providers.)

--Andy

[TLS] Should TLS 1.3 use an augmented PAKE by def… Andy Lutomirski
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Daniel Kahn Gillmor
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Andy Lutomirski
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Ryan Sleevi
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Andy Lutomirski
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Andy Lutomirski
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Ryan Sleevi
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Anders Rundgren
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Ryan Sleevi
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Peter Sylvester
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Andy Lutomirski
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Andy Lutomirski
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Yoav Nir
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Daniel Kahn Gillmor
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Paul Hoffman
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Yoav Nir
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Daniel Kahn Gillmor
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Robert Cragie
[TLS] bootstrapping of constrained devices (was: … Rene Struik
Re: [TLS] bootstrapping of constrained devices Anders Rundgren
Re: [TLS] bootstrapping of constrained devices (w… Michael Sweet
Re: [TLS] bootstrapping of constrained devices (w… t.petch
Re: [TLS] bootstrapping of constrained devices (w… Michael Sweet
Re: [TLS] bootstrapping of constrained devices Anders Rundgren
Re: [TLS] bootstrapping of constrained devices (w… Max Pritikin (pritikin)
Re: [TLS] bootstrapping of constrained devices (w… Don Sturek
Re: [TLS] bootstrapping of constrained devices Robert Cragie
Re: [TLS] bootstrapping of constrained devices Watson Ladd
Re: [TLS] bootstrapping of constrained devices Paterson, Kenny
Re: [TLS] bootstrapping of constrained devices Feng Hao
Re: [TLS] bootstrapping of constrained devices Paterson, Kenny
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Yaron Sheffer
Re: [TLS] Should TLS 1.3 use an augmented PAKE by… Yaron Sheffer
Re: [TLS] bootstrapping of constrained devices Feng Hao
Re: [TLS] bootstrapping of constrained devices Dan Harkins