Re: [TLS] ALPS and TLS 1.3 half-RTT data

2021-02-03 Thread Cory Benfield
On Mon, 1 Feb 2021 at 19:49, David Benjamin wrote: > > On Mon, Feb 1, 2021 at 8:46 AM Cory Benfield wrote: >> >> On Fri, 29 Jan 2021 at 23:38, David Benjamin wrote: >> > To clarify, are you unconvinced that ALPS is easier than leaving H2 alone, >> > or that ALPS is easier than solving this prob

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2021-02-01 Thread David Benjamin
On Mon, Feb 1, 2021 at 8:46 AM Cory Benfield wrote: > On Fri, 29 Jan 2021 at 23:38, David Benjamin > wrote: > > To clarify, are you unconvinced that ALPS is easier than leaving H2 > alone, or that ALPS is easier than solving this problem with half-RTT? The > document’s aim is the latter. Your co

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2021-02-01 Thread Cory Benfield
Oh, and I should say this out loud: my attitude to ALPS has softened in the past two months or so. I definitely don't want my comments to be perceived as being in opposition to the adoption of new work by this WG: I just want to flesh out exactly what problems we're trying to solve, so that we can

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2021-02-01 Thread Cory Benfield
On Fri, 29 Jan 2021 at 23:38, David Benjamin wrote: > > Hi all, > > > Thanks all for the feedback. I’ve tried to address it below, but there's a > lot of text, so please let me know if I’ve missed or misunderstood any of > your points. > > > Cory commented on SETTINGS_[HQ]PACK_ENABLE_STATIC_TABL

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2021-01-31 Thread Martin Thomson
On Sat, Jan 30, 2021, at 10:38, David Benjamin wrote: > How does NSS expose the late client authentication to the application? > I thought NSS didn't support half-RTT at all when the server requests > client certificates, but perhaps I misunderstood. There are three states we use with respect to

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2021-01-29 Thread David Benjamin
Hi all, Thanks all for the feedback. I’ve tried to address it below, but there's a lot of text, so please let me know if I’ve missed or misunderstood any of your points. Cory commented on SETTINGS_[HQ]PACK_ENABLE_STATIC_TABLES in draft-vvv-httpbis-alps-00. I agree that is odd. We’ve uploaded a dr

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2020-12-18 Thread Cory Benfield
On Wed, 16 Dec 2020 at 10:16, Cory Benfield wrote: > > On Fri, 11 Dec 2020 at 03:44, Victor Vasiliev wrote: > > > > Hi Cory, > > > > I am not sure there is a big difference between ALPN and ALPS in that > > regard. ALPS is (or at least can be implemented as) "essentially a static > > byte sequ

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2020-12-16 Thread Cory Benfield
On Fri, 11 Dec 2020 at 03:44, Victor Vasiliev wrote: > > Hi Cory, > > I am not sure there is a big difference between ALPN and ALPS in that regard. > ALPS is (or at least can be implemented as) "essentially a static byte > sequence vended by the application layer protocol". Furthermore, > app

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2020-12-09 Thread Martin Thomson
Hi David, Thanks for writing this up. I think that it helped clarify things a little in my mind. I had been separately thinking about the problem and did reach a conclusion. I just needed time to write a response. I think that there are two things you might want to separate here: what might

Re: [TLS] ALPS and TLS 1.3 half-RTT data

2020-12-08 Thread Cory Benfield
On Thu, 3 Dec 2020 at 21:56, David Benjamin wrote: > > Hi TLS and HTTP friends, > > At the last HTTPWG interim, there was a question of why one would want > something like ALPS (draft-vvv-tls-alps) for HTTP SETTINGS > (draft-vvv-httpbis-alps) over TLS 1.3 half-RTT data. I know we've also had >