[Uta] Proposed definition of opportunistic encryption using TLS: draft-hoffman-uta-opportunistic-tls-00.txt

[Paul Hoffman <[e-mail]>]

Greetings again. One of the deliverables in our charter is:

   - Consider, and possibly define, a standard way for an application
     client and server to use unauthenticated encryption through TLS
     when server and/or client authentication cannot be achieved.

I think that wording was sloppy, and would like the WG to come up with a clear definition of what it is we want application protocols to possibly support in order to thwart pervasive monitoring. I put together my ideas in a very short draft.

If folks like the idea of this definition, I think it would be appropriate for a WG document.

--Paul Hoffman


Begin forwarded message:

> From: [e-mail]
> Subject: I-D Action: draft-hoffman-uta-opportunistic-tls-00.txt
> Date: February 2, 2014 at 8:59:10 PM PST
> To: [e-mail]
> Reply-To: [e-mail]
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> 
> 
>        Title           : Opportunistic Encryption Using TLS
>        Author          : Paul Hoffman
> 	Filename        : draft-hoffman-uta-opportunistic-tls-00.txt
> 	Pages           : 5
> 	Date            : 2014-02-02
> 
> Abstract:
>   This document defines the term "opportunistic encryption using TLS"
>   as it applies to application protocols that use TLS.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-hoffman-uta-opportunistic-tls/
> 
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-hoffman-uta-opportunistic-tls-00