IETF Logo Mail Archive

Re: [Uta] updated I-Ds

Stephen Farrell <stephen.farrell@cs.tcd.ie> Tue, 25 February 2014 22:40 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 942BA1A0338 for <uta@ietfa.amsl.com>; Tue, 25 Feb 2014 14:40:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.447
X-Spam-Level:
X-Spam-Status: No, score=-2.447 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.547] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LvHyMOr58uaE for <uta@ietfa.amsl.com>; Tue, 25 Feb 2014 14:40:41 -0800 (PST)
Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) by ietfa.amsl.com (Postfix) with ESMTP id 570691A02F4 for <uta@ietf.org>; Tue, 25 Feb 2014 14:40:41 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 298EBBEB0; Tue, 25 Feb 2014 22:40:39 +0000 (GMT)
X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie
Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VnnQujN1Poca; Tue, 25 Feb 2014 22:40:38 +0000 (GMT)
Received: from [10.87.48.14] (unknown [86.44.73.150]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 05A38BEA4; Tue, 25 Feb 2014 22:40:37 +0000 (GMT)
Message-ID: <530D1BE5.1070009@cs.tcd.ie>
Date: Tue, 25 Feb 2014 22:40:37 +0000
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>, Watson Ladd <watsonbladd@gmail.com>
References: <52FD1424.4080400@stpeter.im> <CACsn0ckkJqx7EmNR3iwDCKw089LePHWguMmCvYpLz4dgYhUSzQ@mail.gmail.com> <530D0323.7020509@fifthhorseman.net> <CACsn0cmPTeB6kd_bQ7FMctwr1=UHnehk8tmp+aFtxaYg0gUcwA@mail.gmail.com> <530D0E2B.4040406@fifthhorseman.net>
In-Reply-To: <530D0E2B.4040406@fifthhorseman.net>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/uta/greknQjY8764uOuTpMFB4MIvEFU
Cc: uta@ietf.org
Subject: Re: [Uta] updated I-Ds
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Feb 2014 22:40:46 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



On 02/25/2014 09:42 PM, Daniel Kahn Gillmor wrote:
> Yes, agreed.  DHE-1024 needs to be deprecated.
> 

True. But I would hope UTA WG BCPs can be broadly
implemented without waiting for a massive upgrade
so its possible we could have to live with DH-1024.

Much better if that's only a niche or just gets fixed,
but that's the kind of trade off that needs to be
considered. And an important part of that trade off
is not between DH-1024 and RSA-2048, but rather
between PFS and non-PFS ciphersuites.

S.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)

iQEcBAEBAgAGBQJTDRviAAoJEC88hzaAX42i6zIH/RVaXQWArXWBdga17SHXqvO7
viQ1M3iTdNHmaROxdT+qAtt6OXK6eY20bG/QHFvZrUX+RW051LhbCh3WvztXyjfH
BOI+VypROebsmDODi/bFU8JnP4BI8m0F9nsDQTv7QXqV+kG7Rf6nmX7Dru0n0/ad
uTi1WAeTaFft7gKJMGp1enA9ruTP6BqfmcGG+6ejzS9D5bFNQjndTpmsLTLqKCVU
XfO+DRd2F0t/SQVOgTGilxD31gDGlvJioNA4IXjd3PMi6+1BSFuLj10z+SaaTHCe
+yjOVcz8Dg6HaY6PZwW+9o9UDS6Y8f/pnOMxSqy7D8I3sKwuyMJ/cHwM/ksStz4=
=6IKl
-----END PGP SIGNATURE-----

v2.23.0 | Report a Bug | By Email