[TLS] Weekly github digest (TLS Working Group Drafts)

2022-07-31 Thread Repository Activity Summary Bot
Issues -- * tlswg/tls13-spec (+0/-0/💬1) 1 issues received 1 new comments: - #1224 HRR server behavior is underspecified (1 by davidben) https://github.com/tlswg/tls13-spec/issues/1224 [discuss-vienna] * tlswg/draft-ietf-tls-ctls (+2/-0/💬0) 2 issues created: - Remove discussion of

Re: [TLS] draft-deprecate-obsolete-kex - Comments from WG Meeting

2022-07-31 Thread Peter Gutmann
Ilari Liusvaara writes: >Unfortunately, that does not work because it would require protocol >modifications requiring coordinated updates to both clients and servers. I was thinking of it more as a smoke-em-if-you-got-em option, since -LTS is by negotiation it'd be something to the effect that i

Re: [TLS] Authentication weaker in PSK-mode?

2022-07-31 Thread Peter Gutmann
Rob Sayre writes: >Couldn't an implementation use data from a preexisting agreement in a >conventional TLS handshake? Yep, that's more or less TOFU then. TLS isn't supposed to do that though because then it would look like it was SSH, or some reason like that. I sketched out TOFU-for-TLS years