IETF Logo Mail Archive

Re: [Uta] Kathleen Moriarty's Discuss on draft-ietf-uta-tls-attacks-04: (with DISCUSS)

Leif Johansson <leifj@mnt.se> Tue, 14 October 2014 07:20 UTC

Return-Path: <leifj@mnt.se>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEDAB1A6FCC for <uta@ietfa.amsl.com>; Tue, 14 Oct 2014 00:20:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7bj-E4DQcxTd for <uta@ietfa.amsl.com>; Tue, 14 Oct 2014 00:20:02 -0700 (PDT)
Received: from mail-lb0-f171.google.com (mail-lb0-f171.google.com [209.85.217.171]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46B1D1A6FCB for <uta@ietf.org>; Tue, 14 Oct 2014 00:20:02 -0700 (PDT)
Received: by mail-lb0-f171.google.com with SMTP id z12so7690440lbi.16 for <uta@ietf.org>; Tue, 14 Oct 2014 00:20:00 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=CaTbxYjgZjfGelWAUdYZNeElnhdprpdtB8W0l+LT6nQ=; b=lINcolhMt0naqvwaPXg44PSZ/mPRQNGCn67AjNOPx/Rqv/9/LREYcIDCKSPQ/3T6M3 GUTEbEuqDJLWiH/tJBN446KcnyF5LAz3+dijQN3HILc+v5QcUkcJ47TR+2dLJjb5GaSN DF1X3+8DvHC8mgzgQyzXzQwTaIOYeM+miu+d6tRxO0EfqbORFYAqIUVEG3Xjfy94L9xo wyKeNglz2L/EDqByYsHQjXEeijHRsdCIGzKxwH1Yphf8wjwvTmCD0zohBA8rd7ryiSv8 kuuun9OcWUsDmNlLmw93FrtCcD14RaSttz7cyzU4O1u+beJlcS3TxuuOixsMkjK46k9r N2rA==
X-Gm-Message-State: ALoCoQkGNckvvofy10Q0Evh/7n8LeaL7vI1Lkxgmm7HyBpvFidq0Foulgp6BcbxSUmxTza8m1end
X-Received: by 10.152.116.50 with SMTP id jt18mr1312038lab.86.1413271200406; Tue, 14 Oct 2014 00:20:00 -0700 (PDT)
Received: from [193.10.94.39] ([193.10.94.39]) by mx.google.com with ESMTPSA id k7sm5286760lak.22.2014.10.14.00.19.59 for <uta@ietf.org> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 14 Oct 2014 00:19:59 -0700 (PDT)
Message-ID: <543CCE9F.7040508@mnt.se>
Date: Tue, 14 Oct 2014 09:19:59 +0200
From: Leif Johansson <leifj@mnt.se>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.1.2
MIME-Version: 1.0
To: uta@ietf.org
References: <20141013211915.22019.95654.idtracker@ietfa.amsl.com>
In-Reply-To: <20141013211915.22019.95654.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/uta/sC3_f9UmuNTd7OTc4v4RaOSxvhA
Subject: Re: [Uta] Kathleen Moriarty's Discuss on draft-ietf-uta-tls-attacks-04: (with DISCUSS)
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Oct 2014 07:20:07 -0000

> If you have already discussed these items and decided they were out of
> scope, please let me know.  I support this work and just wanted to make
> sure we covered all bases or put some out of scope.  Thank you.

Speaking as an individual I am not convinced that the attacks you
describe belong in a draft on TLS attacks since they touch on general
information security principles (private key protection) or are
specific to the PKI trust model (use of wildcard certs in MITM boxes).

I'm not saying that these are not important attacks on TLS, just that
they are not really specific to TLS.

	Cheers Leif

v2.39.1 | Report a Bug | By Email | System Status