[Uta] Re: draft-ietf-uta-tls13-iot-profile-21 ietf last call Artart review

Martin Thomson <mt@lowentropy.net> Fri, 29 May 2026 00:07 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: uta@mail2.ietf.org
Delivered-To: uta@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id A387AF70C597; Thu, 28 May 2026 17:07:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1780013235; bh=nn54ZZyr2Ql+EUKCQc4tql43N+Lt6nzjJ95KGk9VO74=; h=Date:From:To:In-Reply-To:References:Subject; b=aDPdW6HR81RJyK4pYok3f3AdryWnHFof55pgJRqMyScgg1Kl3k/uet3L6ehr5rwi+ sCphnisnyZ1SNBuLt84b3Jf0sc1p10JAqmT/1DNrPNh7P3Gj8ryMnm5un4KhEd3048 uzGah8YpVgzxw+8RMEksOx3OtI9UAPTyB7u6mWME=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.799
X-Spam-Level:
X-Spam-Status: No, score=-2.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b="PHbgT2y8"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="PU2iEX6P"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GGvct-Bboa3M; Thu, 28 May 2026 17:07:15 -0700 (PDT)
Received: from fout-a7-smtp.messagingengine.com (fout-a7-smtp.messagingengine.com [103.168.172.150]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 948A8F70C466; Thu, 28 May 2026 17:06:26 -0700 (PDT)
Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfout.phl.internal (Postfix) with ESMTP id 646FCEC0AD4; Thu, 28 May 2026 20:06:20 -0400 (EDT)
Received: from phl-imap-15 ([10.202.2.104]) by phl-compute-04.internal (MEProxy); Thu, 28 May 2026 20:06:20 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1780013180; x=1780099580; bh=nAWqtIlC+DWviuJBNvqBTVKiYFxv0WGq/64VcBQ6+Ko=; b= PHbgT2y8Oy6saAifC6peG/sri+RxUgiGv9hAseVdgkfDvXYCWjObllLoRBBrC3rs i7SG1jSvc4TOaKAAI/uSKF3NbfvyvGsmpFoAV5tCrz8Kb2G1SuhtHKTAr2bknPZ8 OG29fHUhB3a0HabX6dFftdWS0rfxpIB6p8xuLR7Uac922CJldQFvPen+5DQM1803 SeG6bedRr8SjOsbrtHhCEPJchg4Ivwn0rW8BOS+kefgN6WDaaYW2N2x/OHrg2FzT nRXSXzfJjIgoaBmH2BPW/ysuqcfDN9ER0v9Ais7UtnyF0jvTQ7+8lcL0LEakFMjs W8KBt6CM3EHh2IqiC3tyXQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1780013180; x=1780099580; bh=n AWqtIlC+DWviuJBNvqBTVKiYFxv0WGq/64VcBQ6+Ko=; b=PU2iEX6P3k7dSauxF Btbma68yX4VYi3wUOQyQZ8//kEcrgo8Ri1Td/iokCoxe5UmRSTpa+GLC1roqN0Kc cidAhKoqqepiIyR1qhn2ZI5sH8QfLh7SI4CUNaXFhaQGXJyGmo2Wg4R2N7rcuw+v S3BOAdH3fjBL4AC+LZTyEW8Yyky2q9ac7VSKzFXsFLXMSGyqxxtpciUZiXc8C1rd OAf1mj3CvMglPpBzaggcW7QDyfSwjAAvCjPhQl5nrRR322710XWpD5TogkoxHHYA gefnIwlFKxc+dA6B1kxsxRR8SAqoWev9lU53VuRh0WpzVzAthLQ9CctdUqm7+BeO hpJSw==
X-ME-Sender: <xms:fNgYap3dRM9ZJrIVs2SLC6tTTPVNHAfcb8PWJ48soI7Z27YeOWn4cg> <xme:fNgYaq49uG3-Sy752PqEZmCNWv-FkH8lCMXUiwqTXJ7N51ZMbr3u_VS35KebKEioC zEj36EHJb7gL0AyDH93VEhMFXWG7yU9Y3KtXNu9laqZ7cNJBHce0G4>
X-ME-Proxy-Cause: dmFkZTE2O4SlxN2tNLaPxRqvG81V7XAqv4Pw3Gr98/lC/Re8ekziHwbZXmM4TeuLIEKJQC uGctZZcqsbj98vokNvOAmO8UqexrD89LTptWtbu6Tmb3DkotlVV9R+VUNkmtDxaNW56DuS YoFCeaY+5RJxAQrPCurhq+d7H05yFkwCQmHq9k2aJgYJ2DlQ+YRaDmdSkt7unnFTPnh4Pt Ugg0rGLrHtNGMr/UZAn9bgLjbIytvteI4OmqB/5hlTTcbUUKz74q4rivg4TrWgFny0zpZB nAsqRC0UCH1MsDjqRJTdAIrk6XFFeTsjaM+Af1RckANV07qkRwshz1B7Ye1b2kFZzKPjJ5 t7ck7EFvbiudCcyVz1A8wg7Lk+TiXfB4XjW8LODV20JLHR6A3VLMMmqrrvvtb3uCZBdVJF eus3eWbtGNs759EQscobIm/CMORUbTbKJFOOKQOVbjP26ziNHu28CzIAtZGca5SSejDMuH ZW/mDkamRMXEElrT2PhUNPKsj+46xv1BE/CtIPDp/+xCc2AXuJz8wspZE/t5UXOuFCyEC5 7rwTi9EaSZr3cw8sxXKdc5SfsXz0ywknRlW0KKf/UyKfrGzNuycGKSY2CL2SXzBfi4buP5 MOPKi8fCpSIegztnDTUWHXIbzYHPgSV0VzSdKB6mzNERJwP31w/8CuKSN5uA
X-ME-Proxy: <xmx:fNgYargKpd4nGJj49VlaaL7sdG3txc14x6WH-XMqQSFd3DRPMxSbqw> <xmx:fNgYau7Gs6CN1FCt-FRSXIx8WnZ0WBLIabkIg8ka_QYrE6mSW80rRA> <xmx:fNgYajYawFsu0v_EGy_HW9litDTm5GUfRGcbdAhyYkLF0Hbnd6787Q> <xmx:fNgYaj7XwCvsZuVG5k_ERQcawHgf9ZqqWnftHjDCE6pTscRwdepLoQ> <xmx:fNgYao3_ok5EHXhoFrXuxzzGij7U52zB0MTbnjgoDQh-d5iGWppSRl7D>
Feedback-ID: ic129442d:Fastmail
Received: by mailuser.phl.internal (Postfix, from userid 501) id 26199780098; Thu, 28 May 2026 20:06:20 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
MIME-Version: 1.0
Date: Fri, 29 May 2026 10:05:59 +1000
From: Martin Thomson <mt@lowentropy.net>
To: Michael Richardson <mcr@sandelman.ca>, art@ietf.org, draft-ietf-uta-tls13-iot-profile.all@ietf.org, last-call@ietf.org, uta@ietf.org
Message-Id: <c0527c25-08f2-4213-a43b-31e517839268@betaapp.fastmail.com>
In-Reply-To: <1960082.1779972951@dyas>
References: <177993307255.1299357.3786405021259992300@dt-datatracker-5b4c8598b5-4ztf9> <1960082.1779972951@dyas>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Message-ID-Hash: TZN5B2SG2MGCWIV4F2XCSA7CTBSS5UXR
X-Message-ID-Hash: TZN5B2SG2MGCWIV4F2XCSA7CTBSS5UXR
X-MailFrom: mt@lowentropy.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-uta.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Uta] Re: draft-ietf-uta-tls13-iot-profile-21 ietf last call Artart review
List-Id: UTA working group mailing list <uta.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/ZgV_6rnBRxXm28pAJaiHKGdyA7Q>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Owner: <mailto:uta-owner@ietf.org>
List-Post: <mailto:uta@ietf.org>
List-Subscribe: <mailto:uta-join@ietf.org>
List-Unsubscribe: <mailto:uta-leave@ietf.org>

Most of this can be handled in the issue discussion now, but just a few follow-ups.

On Thu, May 28, 2026, at 22:55, Michael Richardson wrote:
> Fine, then why is there a TLS MTI that excludes AES_128_CCM_8? :-)

There isn't.  TLS requires AES_128_GCM_SHA256.  And that's not a profile, that's the *protocol*.  A different MTI in a profile is a fork, not a profile.

>     > I'm not confident that the claims about congestion collapse and ACKs in
>     > Section 10 holds. ACKs improve efficiency, sure, but claims about them
>     > helping with congestion collapse seem overblown.  The recommendations
>     > here are otherwise good.
>
> I'm unclear if there something we need to change.

Don't make claims about congestion collapse.

>     > The size of handshakes is clearly a burden here, but the working group
>     > can and should address that point.  The text might have been written at
>     > a different time, but circumstances have changed and the document can't
>     > duck this issue any more.
>
> The TLS or the UTA WG?

UTA.  For this document, at least.  TLS seems incapable of reaching consensus on anything in this space, but UTA need not be constrained by the failures in TLS.