[TLS] Updated TLS-LTS draft posted

2016-06-26 Thread Peter Gutmann
I've just posted the latest draft, as per Russ' comments and Hubert Kario's suggestion this removes any mention of the term "profile" from the text, it's now called an update. It also clarifies some issues that were encountered during testing, for example what happens during a rehandshake and how

Re: [TLS] Updated TLS-LTS draft posted

2016-06-26 Thread Joseph Lorenzo Hall
https://www.ietf.org/rfcdiff?url1=draft-gutmann-tls-lts-03&url2=draft-gutmann-tls-lts-04 On Sun, Jun 26, 2016 at 9:13 AM, Peter Gutmann wrote: > I've just posted the latest draft, as per Russ' comments and Hubert Kario's > suggestion this removes any mention of the term "profile" from the text, i

Re: [TLS] Remove EncryptedExtensions from 0-RTT

2016-06-26 Thread Ilari Liusvaara
On Sun, Jun 26, 2016 at 05:34:04AM +, Subodh Iyengar wrote: > Was there a compelling reason to not just put the ticket age in the > clear in the CHLO field as @davidben alluded to before. It seems to > make it much simpler in general. Unfortunately, just putting it in plain allows correlating

Re: [TLS] Remove EncryptedExtensions from 0-RTT

2016-06-26 Thread Martin Thomson
On 27 June 2016 at 02:34, Ilari Liusvaara wrote: > That's the reason it is XOR'd currently, but the XOR probably will > be changed to ADD32 to break correlation-to-parent (which is really > nasty privacy-wise) in case of ticket reuse. Let's not make that probably. I've updated the PR. _