Re: [TLS] Don't Split HelloRetryRequest

2021-04-05 Thread Martin Thomson
I've created a few pull requests that make the changes I propose. I think that the whole suite of related issues are closed as a result. The main one is here: https://github.com/tlswg/draft-ietf-tls-esni/pull/417 There's a bit of rewriting here, but the change is not that large. I would expect

Re: [TLS] Transport Issues in DTLS 1.3

2021-04-05 Thread Eric Rescorla
Thanks for the discussion. I have pushed the following PR to address your comments: https://github.com/tlswg/dtls13-spec/pull/226 Here is a summary of the changes: - Change the default retransmission timer to 1s and allow people to do otherwise if they have side knowledge. - Cap any given flig

Re: [TLS] DTLS/SCTP and fragmentation

2021-04-05 Thread Martin Thomson
You could also do SCTP over DTLS, which is what WebRTC uses. On Tue, Apr 6, 2021, at 02:40, Rick van Rein wrote: > Hello Michael, > > Thank you! I was searching for options, things that should go into > DTLS, but I was unaware of the attempts of mapping it better to SCTP. > > > What about using

Re: [TLS] ECH-10 interop test server

2021-04-05 Thread Stephen Farrell
Hiya, On 05/04/2021 18:01, Christopher Patton wrote: Hi list, just FYI that Cloudflare's test server is upgrading to draft-ietf-tls-esni-10 this morning. It should finish rolling out in a few hours. Note that we've dropped support for draft-ietf-tls-esni-09. The endpoint is https://crypto.clou

[TLS] ECH-10 interop test server

2021-04-05 Thread Christopher Patton
Hi list, just FYI that Cloudflare's test server is upgrading to draft-ietf-tls-esni-10 this morning. It should finish rolling out in a few hours. Note that we've dropped support for draft-ietf-tls-esni-09. The endpoint is https://crypto.cloudflare.com. You'll also find our ECH config in the HTTPS

Re: [TLS] DTLS/SCTP and fragmentation

2021-04-05 Thread Rick van Rein
Hello Michael, Thank you! I was searching for options, things that should go into DTLS, but I was unaware of the attempts of mapping it better to SCTP. > What about using: > https://tools.ietf.org/html/draft-westerlund-tsvwg-dtls-over-sctp-bis-01 This looks very good, thank you for the pointer

Re: [TLS] DTLS/SCTP and fragmentation

2021-04-05 Thread Michael Tuexen
> On 5. Apr 2021, at 14:12, Rick van Rein wrote: > > Hi, > > Larger frames than the MTU are not just a problem to Diameter; they also > complicate the normal handshake in DTLS which is a bit of a misfit with > DTLS delivery semantics. > > Since the version is bit-swapped in DTLS, each record

Re: [TLS] DTLS/SCTP and fragmentation

2021-04-05 Thread Michael Tuexen
> On 2. Apr 2021, at 23:46, Rick van Rein wrote: > > Hello, > > I was looking into DTLS/SCTP as a carrier for Diameter. Lengths in > Diameter are 24 bit to avoid ever having to bother about that, but when > run over the preferred DTLS/SCTP carrier this may yet be a concern, so > that its only o

Re: [TLS] DTLS/SCTP and fragmentation

2021-04-05 Thread Rick van Rein
Hi, Larger frames than the MTU are not just a problem to Diameter; they also complicate the normal handshake in DTLS which is a bit of a misfit with DTLS delivery semantics. Since the version is bit-swapped in DTLS, each record can easily be distinguished as being either DTLS or TLS. Then, why n