Re: [Uta] updated I-Ds
Yaron Sheffer <yaronf.ietf@gmail.com> Wed, 26 February 2014 08:43 UTC
Return-Path: <yaronf.ietf@gmail.com>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6C481A012C for <uta@ietfa.amsl.com>; Wed, 26 Feb 2014 00:43:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gosLx7L-_CDF for <uta@ietfa.amsl.com>; Wed, 26 Feb 2014 00:43:09 -0800 (PST)
Received: from mail-we0-x22a.google.com (mail-we0-x22a.google.com [IPv6:2a00:1450:400c:c03::22a]) by ietfa.amsl.com (Postfix) with ESMTP id 9CCE51A012B for <uta@ietf.org>; Wed, 26 Feb 2014 00:43:08 -0800 (PST)
Received: by mail-we0-f170.google.com with SMTP id w62so1385500wes.15 for <uta@ietf.org>; Wed, 26 Feb 2014 00:43:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=t/e9kTUEU9NDtvEq4opk+fsoEUMfvBh4O/VdwoT5Zms=; b=LpHyD9uDRGDPUNLPcgCPHLDz7ZvpE3Rwh6KzA8ANxJe4eW4B2qTZClhclrSShdRBs5 4aMXoaszMzCDoDlgWbxNTJgmm8fJL8Fk6DDntVemaNSjDBHBNpdjn5YFjFKRHRSIsbg0 DSXHWKOQsaP4sd+MqjBTUdcFZQ/Vt6sHERwaK3xV+4Q81n7OnX5/OPl7Tz8HaZyNQGhC N2Dtggp4Wvi7LZhrdQZe9cWUA+OSc3cyGDYdMdZ/gl2rwqt6fjuyF87e5SW4k2P44No7 B45lTKrFtJjcXyH0mY+sarpKHqoyFZ3BENmlvxXiW+DcuUCS1nizjsE8T+qSocEJjUUz woUg==
X-Received: by 10.194.85.75 with SMTP id f11mr1276708wjz.47.1393404186863; Wed, 26 Feb 2014 00:43:06 -0800 (PST)
Received: from [10.2.0.25] (93-173-72-197.bb.netvision.net.il. [93.173.72.197]) by mx.google.com with ESMTPSA id dk9sm613412wjb.4.2014.02.26.00.43.05 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 26 Feb 2014 00:43:06 -0800 (PST)
Message-ID: <530DA919.3020502@gmail.com>
Date: Wed, 26 Feb 2014 10:43:05 +0200
From: Yaron Sheffer <yaronf.ietf@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>, Watson Ladd <watsonbladd@gmail.com>
References: <52FD1424.4080400@stpeter.im> <CACsn0ckkJqx7EmNR3iwDCKw089LePHWguMmCvYpLz4dgYhUSzQ@mail.gmail.com> <530D0323.7020509@fifthhorseman.net> <CACsn0cmPTeB6kd_bQ7FMctwr1=UHnehk8tmp+aFtxaYg0gUcwA@mail.gmail.com> <530D0E2B.4040406@fifthhorseman.net> <530D1BE5.1070009@cs.tcd.ie>
In-Reply-To: <530D1BE5.1070009@cs.tcd.ie>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/uta/K8vfrpJTPD4Fh2bxZO8pRPX_-xY
Cc: uta@ietf.org
Subject: Re: [Uta] updated I-Ds
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Feb 2014 08:43:14 -0000
The document recommends ECDHE over DHE, because DHE parameters cannot be negotiated and so some people will be stuck with DH-1024. See http://tools.ietf.org/id/draft-sheffer-tls-bcp-02.html#rfc.section.4.2 But for those people who cannot switch to ECDHE, the tradeoff is exactly between RSA-2048 and DH-1024. Stephen would recommend DH-1024 in this case, because the NSA can get at the server's private key and then, if you don't have PFS, you're hosed. I would recommend RSA-2048 in this case, because DH-1024 can be broken today with commercially available compute power (buy a few Amazon extra large instances and let them run for a few months). Also, and this is a value judgment, I think the cryptographic break is a higher risk than wholesale theft of the private keys. Thanks, Yaron On 02/26/2014 12:40 AM, Stephen Farrell wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > On 02/25/2014 09:42 PM, Daniel Kahn Gillmor wrote: >> Yes, agreed. DHE-1024 needs to be deprecated. >> > > True. But I would hope UTA WG BCPs can be broadly > implemented without waiting for a massive upgrade > so its possible we could have to live with DH-1024. > > Much better if that's only a niche or just gets fixed, > but that's the kind of trade off that needs to be > considered. And an important part of that trade off > is not between DH-1024 and RSA-2048, but rather > between PFS and non-PFS ciphersuites. > > S. > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.14 (GNU/Linux) > > iQEcBAEBAgAGBQJTDRviAAoJEC88hzaAX42i6zIH/RVaXQWArXWBdga17SHXqvO7 > viQ1M3iTdNHmaROxdT+qAtt6OXK6eY20bG/QHFvZrUX+RW051LhbCh3WvztXyjfH > BOI+VypROebsmDODi/bFU8JnP4BI8m0F9nsDQTv7QXqV+kG7Rf6nmX7Dru0n0/ad > uTi1WAeTaFft7gKJMGp1enA9ruTP6BqfmcGG+6ejzS9D5bFNQjndTpmsLTLqKCVU > XfO+DRd2F0t/SQVOgTGilxD31gDGlvJioNA4IXjd3PMi6+1BSFuLj10z+SaaTHCe > +yjOVcz8Dg6HaY6PZwW+9o9UDS6Y8f/pnOMxSqy7D8I3sKwuyMJ/cHwM/ksStz4= > =6IKl > -----END PGP SIGNATURE----- > > _______________________________________________ > Uta mailing list > Uta@ietf.org > https://www.ietf.org/mailman/listinfo/uta >
- [Uta] updated I-Ds Peter Saint-Andre
- Re: [Uta] updated I-Ds Watson Ladd
- Re: [Uta] updated I-Ds Orit Levin (LCA)
- Re: [Uta] updated I-Ds Alexey Melnikov
- Re: [Uta] updated I-Ds Daniel Kahn Gillmor
- Re: [Uta] updated I-Ds Watson Ladd
- Re: [Uta] updated I-Ds Daniel Kahn Gillmor
- Re: [Uta] updated I-Ds Stephen Farrell
- Re: [Uta] updated I-Ds Yaron Sheffer
- Re: [Uta] updated I-Ds Orit Levin (LCA)
- Re: [Uta] updated I-Ds Yaron Sheffer