Re: [TLS] TLS@IETF101 Agenda Posted

2018-03-09 Thread Stephen Farrell
Hi Joe, I'm sorry, but I gotta say that answer seems to me both unresponsive to the questions asked and unconvincing. On 08/03/18 23:08, Joseph Salowey wrote: > Hi Stephen, > > In the meeting in Prague there was interest in this problem space, but > neither the consensus to accept or reject thi

[TLS] Duplicate oid_filters

2018-03-09 Thread Eric Rescorla
See issue #1166. The current text neither allows nor prohibits the same OID appearing twice. We should do one or the other. -Ekr ___ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls

Re: [TLS] Duplicate oid_filters

2018-03-09 Thread Benjamin Kaduk
(See also https://github.com/tlswg/tls13-spec/issues/1179) On 03/09/2018 03:35 PM, Eric Rescorla wrote: > See issue #1166. > > The current text neither allows nor prohibits the same OID appearing > twice. We should do one or the other. > ___ TLS mailing

Re: [TLS] TLS@IETF101 Agenda Posted

2018-03-09 Thread Kathleen Moriarty
Hello, Stephen. On Fri, Mar 9, 2018 at 4:24 PM, Stephen Farrell wrote: > > Hi Joe, > > I'm sorry, but I gotta say that answer seems to me both unresponsive > to the questions asked and unconvincing. > > On 08/03/18 23:08, Joseph Salowey wrote: >> Hi Stephen, >> >> In the meeting in Prague there w

Re: [TLS] Duplicate oid_filters

2018-03-09 Thread Andrei Popov
It should be OK to restrict to one appearance of the same OID, if there is a desire to do so. -Original Message- From: TLS On Behalf Of Benjamin Kaduk Sent: Friday, March 9, 2018 1:45 PM To: Subject: Re: [TLS] Duplicate oid_filters (See also https://na01.safelinks.protection.outlook.

Re: [TLS] TLS@IETF101 Agenda Posted

2018-03-09 Thread Stephen Farrell
Kathleen, On 09/03/18 21:57, Kathleen Moriarty wrote: > Hello, Stephen. > > On Fri, Mar 9, 2018 at 4:24 PM, Stephen Farrell > wrote: >> >> Hi Joe, >> >> I'm sorry, but I gotta say that answer seems to me both unresponsive >> to the questions asked and unconvincing. >> >> On 08/03/18 23:08, Jose

Re: [TLS] Ben Campbell's Yes on draft-ietf-tls-tls13-26: (with COMMENT)

2018-03-09 Thread Eric Rescorla
Following up. > §4.1.2, first paragraph: " When a client first connects to a server, it is REQUIRED to send the >ClientHello as its first message. " > > Is that intended to prohibit the use of STARTTLS or similar application layer patterns? > (To be clear, this is not an objection, just a clar

Re: [TLS] Alexey Melnikov's Discuss on draft-ietf-tls-tls13-26: (with DISCUSS and COMMENT)

2018-03-09 Thread Eric Rescorla
On Wed, Mar 7, 2018 at 6:16 AM, Eric Rescorla wrote: > > > On Wed, Mar 7, 2018 at 5:29 AM, Alexey Melnikov > wrote: > >> Alexey Melnikov has entered the following ballot position for >> draft-ietf-tls-tls13-26: Discuss >> >> When responding, please keep the subject line intact and reply to all >

Re: [TLS] Duplicate oid_filters

2018-03-09 Thread Sean Turner
Okay so the OIDs can’t appear twice in the certificate, because certificate extensions are only supposed to appear once so why don’t we just follow suit and require no dupes? spt > On Mar 9, 2018, at 16:44, Benjamin Kaduk wrote: > > (See also https://github.com/tlswg/tls13-spec/issues/1179) >

Re: [TLS] TLS@IETF101 Agenda Posted

2018-03-09 Thread Melinda Shore
On 3/9/18 12:57 PM, Kathleen Moriarty wrote: > The hummed answer to that question was very close to 50/50 in the > room, inconclusive. From the perspective of consensus decision-making that's actually very clear - there's no consensus. What that means in practice depends on the question that was