Re: [Unbearable] I-D Action: draft-ietf-tokbind-tls13-0rtt-01.txt

Here's a summary of the changes to 0-RTT Token Binding:
- the client changes which exporter it is using partway through the connection
- the client uses a Token Binding extension to indicate whether or not
the early exporter was in use
- revision to the Security Considerations around proof-of-possession

I'd like to discuss whether the replay indication extension proposed
in this draft is actually needed.

On Mon, Mar 13, 2017 at 4:24 PM,  <internet-drafts@ietf.org> wrote:
>
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Token Binding of the IETF.
>
>         Title           : Token Binding for 0-RTT TLS 1.3 Connections
>         Author          : Nick Harper
>         Filename        : draft-ietf-tokbind-tls13-0rtt-01.txt
>         Pages           : 9
>         Date            : 2017-03-13
>
> Abstract:
>    This document describes how Token Binding can be used in the 0-RTT
>    data of a TLS 1.3 connection.  This involves updating how Token
>    Binding negotiation works and adding a mechanism for indicating
>    whether a server prevents replay.  A TokenBindingMessage sent in
>    0-RTT data has different security properties than one sent after the
>    TLS handshake has finished, which this document also describes.
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-tokbind-tls13-0rtt/
>
> There's also a htmlized version available at:
> https://tools.ietf.org/html/draft-ietf-tokbind-tls13-0rtt-01
>
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-tokbind-tls13-0rtt-01
>
>
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> _______________________________________________
> Unbearable mailing list
> Unbearable@ietf.org
> https://www.ietf.org/mailman/listinfo/unbearable