Re: [xmpp] Fwd: I-D Action: draft-saintandre-xmpp-tls-00.txt

[Peter Saint-Andre <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 9/9/13 10:51 AM, Dave Cridland wrote:
> On Mon, Sep 9, 2013 at 5:35 PM, Peter Saint-Andre
> <[e-mail] <mailto:[e-mail]>> wrote:
> 
> There's also a htmlized version available at: 
> http://tools.ietf.org/html/draft-saintandre-xmpp-tls-00
> 
> 
> Thanks for writing this, it looks like an excellent start.
> 
> o  Add information about the rationale for each recommendation, 
> perhaps in an appendix.
> 
> That seems reasonable, but I don't think there's a need to describe
> each recommendation individually.
> 
> o  Recommend a specific ciphersuite or a small number of 
> ciphersuites?
> 
> Picking a small selection of SHOULD or MUST implement seems fair.

BTW, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 seems to be something that
folks prefer for TLS 1.2, but we'll want to recommend something for
earlier versions of TLS, too.

Peter

- -- 
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBAgAGBQJSLgOyAAoJEOoGpJErxa2pV7AP/1PdLbgnZQ/a+Zv+5sgU17u7
5/dr9zjH7H5lhzvI0p3c4MdBm0RwqvCfkg/j3UqcyPpBGNnVyR2Rd1YXUf2R/IAy
BACWIplXND/ieAW4KSxsBg7T7lOdbRzQ/ABtcc41cWkT1BteFNeWA5BsgSMrzuML
Rc+3h+LT+AUZ1sgdCXWog+erZE2dcvR+BJ0BO6or8cjFr/0ImjhPShANndAGLAXW
J5V+f3HO2cqTjAilOA0Bn8CPi2Zl0Usg8CBGoW65xRV/n/ho9tjEUp0Qe1zdHuuV
hs14lUYBuawOtaR8c6PmZyl8IDC9xsePx4CYvFDEbmKarnCUdq3yZMgCg/I/FFe8
gfZKHVb7SeGQP8/THdJiwUudkCXLJ22uFb3I/LKgV7PU97eDWa/WbMvm7yU96IY9
Rca/OxbscTeD6FBIe0OehTkUivp9yGdCpBZtd80WkD0CUmU52AQ+cYtmaCdCLDu4
X+NC4I/sSiE7GML0GbvenTpz5uPEOjFAHhpqLXsX8TKQKFWPzyZUrGO5DeMnDLy6
FBpwhsvBqtU7gxh5N65qstOgh4Yx/vwc6PGlVszT2COaOV1JgYU3i0h4yfFeYKW8
Y/8w6AM3o2qVKEzuEP9A0tocVsiYVb4Od22NxH5nQIXLy1e2Fjn3iVCBCjnyjMcG
SgzWZ80efe7A35e6Zd9F
=KGqJ
-----END PGP SIGNATURE-----