Return-Path: X-Original-To: tls@ietfa.amsl.com Delivered-To: tls@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 469451B3A19 for ; Mon, 10 Aug 2015 10:10:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0G2N6e3IRaO2 for ; Mon, 10 Aug 2015 10:10:41 -0700 (PDT) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0101.outbound.protection.outlook.com [207.46.100.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B92E1B3A17 for ; Mon, 10 Aug 2015 10:10:40 -0700 (PDT) Received: from BLUPR03MB1393.namprd03.prod.outlook.com (10.163.81.14) by BLUPR03MB215.namprd03.prod.outlook.com (10.255.212.154) with Microsoft SMTP Server (TLS) id 15.1.231.11; Mon, 10 Aug 2015 17:10:39 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=aGHcTvctw3zAQFkHXeP/KQPEZTobK7wSiIYFqVD2O3k=; b=RnJ/I3YKtVbWgBaH/Sr5y3PLtPEcyYWymGqKJoT0s1uab+lzYfmhTJQ2FgMwl0G68Ii21UZW1lFKR/VqPPgirg4ZoaYQuoYAQ9/tUX8JbDk7q1qmWIyAHJ6mLWTA4Zmu2ehboK909o+tj9lTDpkLQlIXtMAMmKlTjS+fSzYTP80= Received: from BLUPR03MB1396.namprd03.prod.outlook.com (10.163.81.142) by BLUPR03MB1393.namprd03.prod.outlook.com (10.163.81.14) with Microsoft SMTP Server (TLS) id 15.1.225.19; Mon, 10 Aug 2015 17:10:38 +0000 Received: from BLUPR03MB1396.namprd03.prod.outlook.com ([10.163.81.142]) by BLUPR03MB1396.namprd03.prod.outlook.com ([10.163.81.142]) with mapi id 15.01.0225.018; Mon, 10 Aug 2015 17:10:38 +0000 From: Andrei Popov To: Ilari Liusvaara Thread-Topic: [TLS] Commentary on the client authentication presentation slides Thread-Index: AQHQwvXiSxNxWYXIoUOvWC1ZP+t1vJ3qDNvQgAd2zoCAAABcAIAFY9OAgAIEqACAAC/RAIAB9sGQgAbZS4CAA6ghwA== Date: Mon, 10 Aug 2015 17:10:38 +0000 Message-ID: References: <20150720141036.GA32204@LK-Perkele-VII> <20150801084849.GA7162@LK-Perkele-VII> <20150802182908.GA29836@LK-Perkele-VII> <20150808090351.GA14947@LK-Perkele-VII> In-Reply-To: <20150808090351.GA14947@LK-Perkele-VII> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Andrei.Popov@microsoft.com; x-originating-ip: [2001:4898:80e8:2::1d2] x-microsoft-exchange-diagnostics: 1; BLUPR03MB1393; 5:WrzIG0XeiD3MKp9bdeWGMiCb03dFVSckwANpqLubnRsYXRJ/0WA7iR7tdWUkvOpZt11rDMcPixjdb4OHzn6Ueq/QP/h/+lTTl6SnmN9G1StFrXagSCjAuknsUUJa5Im/WdAQr7lNuA0cQDV45zUklA==; 24:25jVUQ3o3PgzbC8oqG3SguZBFkOz/BAmSczsQGD1d9d4AFYNN5msKL0jGEU3WC+sJitQH9HRQgvpUDhPXPjiqHQpyWJ7GkHCT9F6Rmhuq9s=; 20:WHyI9NXFjl/AcKPTVKb3cHQPOWDRe7ofK+eBtkQ2E365Mdseyga51sbVRE3ma/V/OZi2ne397TVaozBZBLyY8w== x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:; SRVR:BLUPR03MB1393; UriScan:; BCL:0; PCL:0; RULEID:; SRVR:BLUPR03MB215; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401001)(5005006)(3002001); SRVR:BLUPR03MB1393; BCL:0; PCL:0; RULEID:; SRVR:BLUPR03MB1393; x-forefront-prvs: 06640999CA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377454003)(13464003)(189002)(24454002)(199003)(19580395003)(10400500002)(68736005)(5001830100001)(97736004)(5002640100001)(5001860100001)(54356999)(74316001)(40100003)(189998001)(5005710100001)(8990500004)(76176999)(10290500002)(110136002)(81156007)(122556002)(101416001)(4001540100001)(62966003)(77156002)(99286002)(2950100001)(105586002)(76576001)(92566002)(50986999)(64706001)(5001920100001)(5001960100002)(46102003)(2656002)(87936001)(19580405001)(5003600100002)(77096005)(102836002)(86612001)(106356001)(86362001)(106116001)(33656002)(10090500001)(2900100001)(93886004)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BLUPR03MB1393; H:BLUPR03MB1396.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Aug 2015 17:10:38.8679 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR03MB1393 X-Microsoft-Exchange-Diagnostics: 1; BLUPR03MB215; 2:9qvr8LuGYSUvEqXrOUI53FvxBL9hmc9pYV7AIo7AjSPLbZdZtGrEHq6bgbdz34f5RJqsXQbx6llKn82H+vXpe2FQfjYJgoBHtTwIBvUQOxb230ZorYW7tTWjQNOFM5jLf6TeM7phKbYoXSzOY+X8nw8nlGayXzyirDN4FxUnHz0=; 3:RrpN208Bi/dh4acx++LLXKJdDRQ+9u6tvNRRXCffoP/NJZzHakAIBqarlTH2WHlPQoYtU+bhwAlqDH4x10rwpaz/vaMI9lFdXDpcPtwcaoamKGHgwvqv5/HgB9jPrRaOyTk4ySOrh2SAbiGSo5rs+Q==; 25:zi/cBDZ9CJe30o/NeHNYUHpNW1PtJ3EwBFPLGt9hBNyjJGV//Nm9A/qr2/Meq+TPnwZ87rOgpbSrDUL7sk/xrmR2RJB8IKlnCjrjd/JhqCRr4XZTKu/HI/7W8rtZdHybtaaEup2udjOXKZrrPtun9ve+TeWSAahf1MknCEPljLHiZlg+H2ZKKkhUyOVa343IZpeQLaZU8cYYwSSx92SCc64uOvwntULqcfS7YnnJvfSI0kRn2mk4DbmTNLTlNJm2Bp/JNC+ltC9YbbsfiXfnmw==; 23:FOfSyjMMypaTPCEiZS8swooq8YD5PJnGpD8gujwrie63+qaWoy6k1khtaMkPf//u6pBLu6TzS4CkfiQsoJM6zt9U9edt/XkidG9buAE5yhdAbLAHWaL0latS78P3IbpZTm4hOK4dwLAZDyxMNtTzAOwpB3NjiizJIP8ZguZjXAQketYcDpPdZV60xcCSiUCd X-OriginatorOrg: microsoft.com Archived-At: Cc: "tls@ietf.org" Subject: Re: [TLS] Commentary on the client authentication presentation slides X-BeenThere: tls@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Aug 2015 17:10:43 -0000 SGkgSWxhcmksDQoNCj4gV2hhdCBzb3J0IG9mIHVzZWNhc2UgeW91IGhhdmUgaW4gbWluZCBmb3Ig dGhpcz8NClRoaXMgaXMgdG8gc3VwcG9ydCBhIGZhaXJseSBjb21tb24gd2Vic2l0ZSBkZXNpZ24g d2hlcmUgdGhlIGxhbmRpbmcgcGFnZSBkb2VzIG5vdCByZXF1aXJlIGNsaWVudCBhdXRoLCBidXQg c3Vic2VxdWVudCByZXF1ZXN0IHRvIGEgcHJvdGVjdGVkIHJlc291cmNlIHRyaWdnZXJzIGNsaWVu dCBhdXRoZW50aWNhdGlvbiB3aXRoaW4gYW4gZXhpc3RpbmcgVExTIGNvbm5lY3Rpb24uDQpJbiBU TFM8PTEuMiwgdGhpcyB3YXMgYWNjb21wbGlzaGVkIHZpYSByZW5lZ290aWF0aW9uLiBJbiBUTFMx LjMsIHRoZXJlIGlzIG5vIHJlbmVnb3RpYXRpb24sIHNvIHdlIG5lZWQgYW4gYWx0ZXJuYXRpdmUg c29sdXRpb24gaWYgd2Ugd2FudCB0byBzdXBwb3J0IHRoZXNlIGV4aXN0aW5nIHNpdGVzIG92ZXIg VExTMS4zLg0KDQo+IFdoZXJlJ3MgdGhlIGNhcGFiaWxpdHkgZm9yIGNsaWVudCB0byB1bmlsYXRl cmlhbGx5IGRlY2lkZSB0byBzZW5kIGEgY2VydGlmaWNhdGUgd2l0aG91dCB2YWxpZCBjb25maWd1 cmF0aW9uPw0KTXkgcHVsbCByZXF1ZXN0IGlzIGRlc2lnbmVkIHRvIGFkZHJlc3MgY2xpZW50IGF1 dGggaW4gdGhlIG1pZGRsZSBvZiBhIFRMUyBjb25uZWN0aW9uLCBhZnRlciB0aGUgaGFuZHNoYWtl IGlzIGNvbXBsZXRlLCB3aGljaCBpcyBhbiBleGlzdGluZyBzY2VuYXJpbyB0aGF0IHdhcyBicm9r ZW4gYnkgdGhlIHJlbW92YWwgb2YgcmVuZWdvdGlhdGlvbiBpbiBUTFMgMS4zLg0KSWYgZW5vdWdo IHBlb3BsZSB3YW50IHRoZSBjYXBhYmlsaXR5IGZvciB0aGUgY2xpZW50IHRvIHZvbHVudGVlciBh IGNlcnRpZmljYXRlLCBJIGRvbid0IG1pbmQgYWRkaW5nIHRoaXMgdG8gbXkgcHVsbCByZXF1ZXN0 LiBSaWdodCBub3cgSSBkb24ndCBoYXZlIGEgc2Vuc2Ugb2YgaG93IHVzZWZ1bCBXRyBwYXJ0aWNp cGFudHMgdGhpbmsgdGhpcyB3b3VsZCBiZS4NCg0KQ2hlZXJzLA0KDQpBbmRyZWkNCg0KLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IElsYXJpIExpdXN2YWFyYSBbbWFpbHRvOmlsYXJp LmxpdXN2YWFyYUBlbGlzYW5ldC5maV0gDQpTZW50OiBTYXR1cmRheSwgQXVndXN0IDgsIDIwMTUg MjowNCBBTQ0KVG86IEFuZHJlaSBQb3BvdiA8QW5kcmVpLlBvcG92QG1pY3Jvc29mdC5jb20+DQpD YzogRGF2aWQgQmVuamFtaW4gPGRhdmlkYmVuQGNocm9taXVtLm9yZz47IHRsc0BpZXRmLm9yZw0K U3ViamVjdDogUmU6IFtUTFNdIENvbW1lbnRhcnkgb24gdGhlIGNsaWVudCBhdXRoZW50aWNhdGlv biBwcmVzZW50YXRpb24gc2xpZGVzDQoNCk9uIFR1ZSwgQXVnIDA0LCAyMDE1IGF0IDEyOjM3OjQ3 QU0gKzAwMDAsIEFuZHJlaSBQb3BvdiB3cm90ZToNCj4gPiBXZWxsLCBUTFMgaXMgYWxzbyB1c2Vk IGZvciBub24tYnJvd3NlciBIVFRQUyBhbmQgc3R1ZmYgb3RoZXIgdGhhbiBIVFRQUy4NCj4gPiBU aGVyZSBvbmUgbGlrZWx5ICJwcmVjb25maWd1cmVzIiBjbGllbnQgY2VydGlmaWNhdGVzIGlmIG5l ZWRlZC4NCj4gVGhlIHByb3Bvc2VkIGNsaWVudCBhdXRoZW50aWNhdGlvbiBtZWNoYW5pc20gc3Bl Y2lmaWNhbGx5IGFkZHJlc3NlcyANCj4gdGhlIGNhc2Ugd2hlcmUgdGhlIGNsaWVudCBkb2VzIG5v dCBoYXZlIG9uZSAicHJlY29uZmlndXJlZCIgY2VydC4NCg0KV2hhdCBzb3J0IG9mIHVzZWNhc2Ug eW91IGhhdmUgaW4gbWluZCBmb3IgdGhpcz8gSSBjYW4ndCBjb21lIHVwIHdpdGggc2luZ2xlIG9u ZSB0aGF0IEkgZG9uJ3QgdGhpbmsgaXMgYSBoYWNrIGF0IGJlc3QuDQoNCk5vdGU6IEl0IGlzIHZl cnkgZWFzeSB0byBtaXN1c2UgY2FwYWJpbGl0eSBsaWtlIHRoaXMgKGV2ZW4gaWYgaXQgaXMgcmVz dHJpY3RlZCB0byB3b3JrIG9ubHkgb25jZSBwZXIgY29ubmVjdGlvbikgdG8gY3JlYXRlIG5hc3R5 IHNlY3VyaXR5IGlzc3VlcyAob25lIGV4YW1wbGUgYmVpbmcgdHJ5aW5nIHRvIHVzZSB0aGlzIGZv ciBIVFRQLzIgaW4gYnJvd3NlciBlbnZpcm9ubWVudCkuDQoNCj4gPiAtIFRMUy1sZXZlbCBjbGll bnQgY2VydGlmaWNhdGUgYXV0aCBvbiBjbGllbnQgcmVxdWVzdCBvbiBjb25uZWN0IA0KPiA+ICh0 aGlzICBjdXJyZW50bHkgY2FuJ3QgYmUgY2xlYW5seSBkb25lLCBzb21ldGltZXMgb25lIGV2ZW4g c2VlcyB0aGF0IA0KPiA+ICJyZW5lZ28gIGltbWVkaWF0ZWx5IHRvIHByb3Zva2UgQ1IiIGhhY2sp Lg0KPiBXaXRoIHRoZSBwcm9wb3NlZCBjaGFuZ2UsIHRoZXJlIHdpbGwgYmUgbm8gbmVlZCB0byBy ZW5lZ290aWF0ZSBpbiANCj4gb3JkZXIgdG8gYXV0aGVudGljYXRlIHRoZSBjbGllbnQuDQoNCldo ZXJlJ3MgdGhlIGNhcGFiaWxpdHkgZm9yIGNsaWVudCB0byB1bmlsYXRlcmlhbGx5IGRlY2lkZSB0 byBzZW5kIGEgY2VydGlmaWNhdGUgd2l0aG91dCB2YWxpZCBjb25maWd1cmF0aW9uPyBUaGUgMC1S VFQgY2VydGlmaWNhdGUgYXV0aGVudGljYXRpb24gcmVxdWlyZXMgYSB2YWxpZCBjb25maWd1cmF0 aW9uLg0KDQpFLmcuIG9uZSB3YXkgdG8gaW1wbGVtZW50IHRoYXQgd291bGQgYmUgY2VydGlmaWNh dGVfcmVxdWVzdF9yZXF1ZXN0IGV4dGVuc2lvbiwgd2hpY2ggd291bGQgcmVxdWVzdCBzZXJ2ZXIg dG8gc2VuZCBhIENlcnRpZmljYXRlUmVxdWVzdC4NCg0KVGhvIHdpdGggdGhlIGNoYW5nZXMgdG8g YWx3YXlzIHNpZ24gdGhlIGtleSBleGNoYW5nZSwgdXNpbmcgMC1SVFQgY2xpZW50IGNlcnRzIGRv ZXNuJ3Qgd29yayB1bmxlc3MgdGhlIHNlcnZlciByZXF1ZXN0ZWQgY2VydGlmaWNhdGVzIGJhY2sg dGhlbi4NCg0KPiAgPiAtIEFwcGxpY2F0aW9uLWxldmVsIGNsaWVudCBhdXRoICh2aWEgQ0IgY2Fw YWJpbGl0eSBvZiBUTFMpLg0KPiBUaGUgcHJvcG9zZWQgbWVjaGFuaXNtIGRvZXMgbm90IHByZWNs dWRlIHRoaXMgb3B0aW9uLg0KDQpUaGF0IHdhcyBnaXZlbiBhcyBzZWNvbmQgb2YgdHdvIGVudHJp ZXMgaW4gbGlzdCBvZiBraW5kcyBvZiBhdXRoZW50aWNhdGlvbiBJIHRoaW5rIGFyZSB1c2VmdWwg KGFuZCBwcmVjbHVkaW5nIGl0IHdvdWxkIG1lYW4gcmVtb3ZpbmcgVExTLVVuaXF1ZSBhbmQgVExT LUV4dHJhY3Rvciwgd2hpY2ggaXMgc29tZXRoaW5nIHRoYXQgSSByZWFsbHkgZG9uJ3Qgc2VlIGhh cHBlbmluZykuDQoNCg0KDQoNCi1JbGFyaQ0K