Re: [Uta] Fwd: New Version Notification for draft-sheffer-uta-tls-attacks-00.txt

On Sat, Feb 8, 2014 at 1:58 PM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:
> Hi,
>
> This contribution should cover the working group's first deliverable, per
> the chairs' list
> (http://www.ietf.org/mail-archive/web/uta/current/msg00053.html). The
> document is essentially Sec. 2 of draft-sheffer-tls-bcp, with barely any
> changes.
>
> Comments and especially additions about application-specific attacks are
> most welcome.

How about the issues relating to validating certificates, particularly
in non-browser code?

For reference https://crypto.stanford.edu/~dabo/pubs/abstracts/ssl-client-bugs.html
is a good start.

Sincerely,
Watson Ladd
>
> Thanks,
>         Yaron
>
>
> -------- Original Message --------
> Subject: New Version Notification for draft-sheffer-uta-tls-attacks-00.txt
> Date: Fri, 07 Feb 2014 21:54:45 -0800
> From: internet-drafts@ietf.org
> To: Yaron Sheffer <yaronf.ietf@gmail.com>, "Ralph Holz"
> <holz@net.in.tum.de>, Peter Saint-Andre <ietf@stpeter.im>, Ralph Holz
> <holz@net.in.tum.de>, "Peter Saint-Andre" <ietf@stpeter.im>, "Yaron Sheffer"
> <yaronf.ietf@gmail.com>
>
>
> A new version of I-D, draft-sheffer-uta-tls-attacks-00.txt
> has been successfully submitted by Yaron Sheffer and posted to the
> IETF repository.
>
> Name:           draft-sheffer-uta-tls-attacks
> Revision:       00
> Title:          Summarizing Current Attacks on TLS and DTLS
> Document date:  2014-02-07
> Group:          Individual Submission
> Pages:          7
> URL:
> http://www.ietf.org/internet-drafts/draft-sheffer-uta-tls-attacks-00.txt
> Status: https://datatracker.ietf.org/doc/draft-sheffer-uta-tls-attacks/
> Htmlized:       http://tools.ietf.org/html/draft-sheffer-uta-tls-attacks-00
>
>
> Abstract:
>    Over the last few years there have been several serious attacks on
>    TLS, including attacks on its most commonly used ciphers and modes of
>    operation.  This document summarizes these attacks, with the goal of
>    motivating generic and protocol-specific recommendations on the usage
>    of TLS and DTLS.
>
>
>
>
>
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
>
> _______________________________________________
> Uta mailing list
> Uta@ietf.org
> https://www.ietf.org/mailman/listinfo/uta

-- 
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin