➢ In other words, is it worth spending time?
You might find it worthwhile to look at Peter’s “LTS for TLS” draft.
Nobody cares about heartbeats and for this issue, that’s probably good enough.
___
TLS mailing list
TLS@ietf.org
https://www.ietf.org
This is an uncontroversial change and nobody has responded from the list,
so unless someone has any objections I'm going to incorporate this change
(along with a change to address Benjamin Kaduk's comments) and publish a
new draft next week.
Nick
On Thu, Nov 23, 2017 at 1:18 PM Nick Sullivan
wro
Hi,
The current draft makes the following claim:
Field measurements have found that a significant number of middleboxes
misbehave when a TLS client/server pair negotiates TLS 1.3.
Would it be possible to add a reference for this claim for the benefit
of future readers? One possible (ters
I would cite:
https://datatracker.ietf.org/meeting/100/materials/slides-100-tls-sessa-tls13/
(the slides, which include David's data)
https://www.ietf.org/mail-archive/web/tls/current/msg25091.html (my email
from yesterday)
-Ekr
On Wed, Dec 6, 2017 at 3:35 PM, Peter Wu wrote:
> Hi,
>
> The
Thanks for the info. I see a pull request has just been submitted already:
https://github.com/tlswg/tls13-spec/pull/1116
On Tue, Dec 5, 2017 at 1:03 AM, Eric Rescorla wrote:
>
>
> On Mon, Dec 4, 2017 at 1:59 AM, Alex C wrote:
>
>> The obvious problem with randomly adding fake versions is you ha
