Re: [TLS] Zero-RTT Data & PSK

2016-10-11 Thread Martin Thomson
I put a few minor comments on the commit. Nothing that affects the technical content though, it looks correct. (Good catch on SNI, I think that I missed that one.) On 12 October 2016 at 03:23, Eric Rescorla wrote: > This LGTM. Absent objections I will merge tomorrow > > On Tue, Oct 11, 2016 at

Re: [TLS] Zero-RTT Data & PSK

2016-10-11 Thread Eric Rescorla
This LGTM. Absent objections I will merge tomorrow On Tue, Oct 11, 2016 at 9:22 AM, Hannes Tschofenig < hannes.tschofe...@gmx.net> wrote: > I gave it a try, see > https://github.com/tlswg/tls13-spec/pull/668/commits/ > 91e5b39e5f0ce62a90effdbaf4e3c90ed0d81245 > > > Ciao > Hannes > > > On 10/10/20

Re: [TLS] Zero-RTT Data & PSK

2016-10-11 Thread Hannes Tschofenig
I gave it a try, see https://github.com/tlswg/tls13-spec/pull/668/commits/91e5b39e5f0ce62a90effdbaf4e3c90ed0d81245 Ciao Hannes On 10/10/2016 11:59 PM, Eric Rescorla wrote: > I agree with MT. Hannes, if you want to clean up the text to take into > account MT's comments, I will merge > > On Sat,

Re: [TLS] Zero-RTT Data & PSK

2016-10-10 Thread Eric Rescorla
I agree with MT. Hannes, if you want to clean up the text to take into account MT's comments, I will merge On Sat, Sep 10, 2016 at 3:35 AM, Martin Thomson wrote: > On 9 September 2016 at 23:37, Hannes Tschofenig > wrote: > > I am wondering why I cannot use Zero-RTT with just PSK-based > authent

Re: [TLS] Zero-RTT Data & PSK

2016-09-10 Thread Martin Thomson
On 9 September 2016 at 23:37, Hannes Tschofenig wrote: > I am wondering why I cannot use Zero-RTT with just PSK-based authentication > (without a prior ticket change). I think that you would need to bind more things to the key in that case, but I assume that it would be OK if you did so. You alr

[TLS] Zero-RTT Data & PSK

2016-09-09 Thread Hannes Tschofenig
Hi all, the current spec says: --- 2.3. Zero-RTT Data When resuming via a PSK with an appropriate ticket (i.e., one with the “allow_early_data” flag), clients can also send data on their first flight (“early data”). --- I am wondering why I cannot use Zero-RTT with just PSK-based authentic