Re: [TLS] IANA Recommendations for Obsolete Key Exchange

2024-04-22 Thread Hubert Kario
On Monday, 15 April 2024 19:30:29 CEST, Joseph Salowey wrote: At IETF 119 we had discussion on how to mark the ciphersuites deprecated by draft-ietf-tls-deprecate-obsolete-kex in the IANA Registry. At the meeting there was support for ('D' means discouraged): RSA ciphersuites should be marked

Re: [TLS] IANA Recommendations for Obsolete Key Exchange

2024-04-15 Thread Martin Thomson
With David's clarifications, this is good. On Tue, Apr 16, 2024, at 04:46, David Benjamin wrote: > From the meeting, I remember there being some confusion around a table > that split things up between TLS 1.2 and TLS 1.3, and differences in > how they negotiate things, which makes this listing a

Re: [TLS] IANA Recommendations for Obsolete Key Exchange

2024-04-15 Thread David Benjamin
>From the meeting, I remember there being some confusion around a table that split things up between TLS 1.2 and TLS 1.3, and differences in how they negotiate things, which makes this listing a bit ambiguous. In particular, there aren't any *cipher suites* with FFDH or FFDHE in their name in TLS 1

Re: [TLS] IANA Recommendations for Obsolete Key Exchange

2024-04-15 Thread Rob Sayre
I don't really feel strongly about this issue, but the document left me feeling a little lost concerning ECDH. I think documents should always explain the concerns around an RFC 2119 "SHOULD" or "SHOULD NOT". It's fine if "there may exist valid reasons in particular circumstances when the particul