Re: [TLS] [Uta] Compression along with TLS in NNTP

2016-06-12 Thread Julien ÉLIE
Hi Ángel, The main problem is not as much that the contents are compressed or not, but that known plain text and confidential data are compressed together. As such, I don't think it's usually necessary to disable it for confidential articles/newsgroups. First of all, thanks for your valuable

Re: [TLS] Compression along with TLS in NNTP

2016-06-12 Thread Jeffrey Walton
> Here is an extract of the paragraphs dealing with TLS in the draft, so that > you can easily see what to comment (wording improvement, missing stuff...). > >The point of COMPRESS as an NNTP extension is to behave as a >transport layer, similar to STARTTLS [RFC4642]. Compression can >

Re: [TLS] [Uta] Compression along with TLS in NNTP

2016-06-12 Thread Julien ÉLIE
Hi Jeffrey, Here is an extract of the paragraphs dealing with TLS in the draft, so that you can easily see what to comment (wording improvement, missing stuff...). The point of COMPRESS as an NNTP extension is to behave as a transport layer, similar to STARTTLS [RFC4642]. Compression can

Re: [TLS] [Uta] Compression along with TLS in NNTP

2016-06-12 Thread Ángel González
On 2016-06-12 at 15:53 +0200, Julien ÉLIE wrote: > Hi Ángel, > > First of all, thanks for your valuable comment.  I will take it into  > account in the wording of the draft. > Hello Julien You are welcome > I understand the scenario. > It implies here that the client will have to know somehow

Re: [TLS] [Uta] Compression along with TLS in NNTP

2016-06-12 Thread Ángel González
On 2016-06-10 at 22:43 +0200, Julien ÉLIE wrote: > NNTP commands other than AUTHINFO are not believed to divulgate > confidential information as far as public Netnews newsgroups and > articles are concerned.  That is why this specification only adds a > restriction to the use of AUTHINFO when a com