Re: [TLS] Encrypt-then-MAC again (was Re: padding bug)

On Thu, Nov 28, 2013 at 7:02 AM, Eric Rescorla <ekr@rtfm.com> wrote:
> On Thu, Nov 28, 2013 at 3:32 AM, Peter Gutmann <p.gutmann@auckland.ac.nz> wrote:
>> Michael D'Errico <mike-list@pobox.com> writes:
>>
>>>In trying to figure out what's stalling the encrypt-then-mac draft
>>
>> What's stalling the draft is that the WG chairs refuse to accept it, and
>> nothing else.
>
> Peter,
>
> This topic was discussed at the TLS WG meeting in Vancouver
> (since you declined to attend, Joe Salowey provided a brief
> description of the two options). Your proposed approach
> had no support in the room. You can find the minutes here:
>
> http://tools.ietf.org/wg/tls/minutes?item=minutes-88-tls.html
>
> So, while there has been some support on the list, I don't
> believe that this supports the claim that there is rough
> consensus for this draft.
Where are the opponents on the list? Anyone can hum, but I would like
to see them
put their names and reasons down. I personally think we should have a
ciphersuitedammerung in which
everything but AES-GCM is depreciated, and adding encrypt-then-mac
isn't worth it, so I probably
would have opposed it: it adds complexity at no gain. Then again my
hopes have been crushed again and again.

But as chair you have failed consistently to ensure that the list
reflects the decision making process.
You are directly responsible for endorsing drafts with known security
issues, and have failed to articulate
a clear direction forwards for this WG. You have placed users and
their security below the convenience of vendors,
presiding over the expansion of a smorgasbord of options so that
everyone can claim to support TLS 1.2, without providing
an iota of security or interoperability. Anyone can extend TLS and get
your approval, so long as it doesn't improve
security or have a chance of actually getting used. (See SRP and PWD).
What have the past 14 years done for us in terms of improvements to TLS?
Sincerely,
Watson
>
> With that said, if you're unhappy with the performance of the
> chairs, you should reach out to the Security ADs
> (sec-ads@tools.ietf.org)
>
> Best.
> -Ekr
> [Speaking as Chair]
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls


-- 
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin