[TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS

2025-02-25 Thread Arnaud Taddei
+1 Arnaud Taddei Global Security Strategist | Enterprise Security Group | ITU-T SG17 chair mobile: +41 79 506 1129 Geneva, Switzerland arnaud.tad...@broadcom.com | broadcom.com On Mon, Feb 24, 2025 at 10:55 PM Martin Thomson wrote: > On Tue, Feb 25, 2025, at 06:56, Aaron Zauner wrote: > >

[TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS

2025-02-25 Thread Arnaud Taddei
sorry, open source != standardisation and vice versa Arnaud Taddei Global Security Strategist | Enterprise Security Group | ITU-T SG17 chair mobile: +41 79 506 1129 Geneva, Switzerland arnaud.tad...@broadcom.com | broadcom.com On Mon, Feb 24, 2025 at 11:30 PM Aaron Zauner wrote: > Hey, > >

[TLS] Re: PQ Cipher Suite I-Ds: adopt or not?

2025-02-25 Thread Sean Turner
Hi! The chairs gathered a lot of information from this thread. Thanks for that. We have also noted PQ-related discussions in other WGs. Based on all of this, Joe and I [0] are going to begin to issue WG calls for adoption in this order one roughly right after the after: - draft-kwiatkowski-tl

[TLS] Implicit ECH Config for TLS 1.3 – addressing public_name fingerprinting

2025-02-25 Thread Nick Sullivan
Hi everyone, I’ve put together a draft, “Implicit ECH Configuration for TLS 1.3” ( https://www.ietf.org/archive/id/draft-sullivan-tls-implicit-ech-00.html), as a potential starting point for improving ECH’s “do not stick out” compliance. Global deployments of ECH have become biased because a singl

[TLS] Re: [IANA #1413503] expert review for draft-ietf-tls-esni (tls-extensiontype-values)

2025-02-25 Thread Salz, Rich
I approve. The draft does not say if the existing TLS DE's will do the new table, but I am okay with taking on that additional workload :) ___ TLS mailing list -- tls@ietf.org To unsubscribe send an email to tls-le...@ietf.org

[TLS] I-D Action: draft-ietf-tls-trust-anchor-ids-00.txt

2025-02-25 Thread internet-drafts
Internet-Draft draft-ietf-tls-trust-anchor-ids-00.txt is now available. It is a work item of the Transport Layer Security (TLS) WG of the IETF. Title: TLS Trust Anchor Identifiers Authors: Bob Beck David Benjamin Devon O'Brien Kyle Nekritz Name:dr

[TLS] Re: [EXTERNAL] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS

2025-02-25 Thread Andrei Popov
* But I don't know of anywhere else with broad enough remit * to mandate a behavior for all applications using TLS. This is a common perception, and it is exactly why publishing SSLKEYLOGFILE documents in the context of the IETF is a bad idea. This creates additional pressure on other imp

[TLS] [IANA #1413503] expert review for draft-ietf-tls-esni (tls-extensiontype-values)

2025-02-25 Thread David Dong via RT
Dear Yoav Nir, Rich Salz (cc: tls WG, tls-reg-review mailing list, Nick Sullivan), As the designated experts for the TLS ExtensionType Values registry, can you review the proposed registration in draft-ietf-tls-esni-23 for us? Please note that Nick Sullivan is a co-author for this draft. Plea

[TLS] Re: [EXTERNAL] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS

2025-02-25 Thread Yaakov Stein
All, I fully support standardizing the SSLKEYLOGFILE Format. While it is a debugging tool, that doesn’t mean it doesn’t have to be standardized. Where I work we maintain a large set of protocol analysis tools used to verify correct operation of various programs, and document variant behaviors.

[TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS

2025-02-25 Thread Salz, Rich
I fully agree with Martin. IETF has historically not been just about bits on the wire. I am sanguine that this creates new security concerns that are not already present[1] [1] https://mailarchive.ietf.org/arch/msg/tls/ySWMlQieatYXs6J-3YSHtvhSYCM/ __

[TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS

2025-02-25 Thread Stephen Farrell
Hiya, On 24/02/2025 21:54, Martin Thomson wrote: but this is a case where that interoperation already exists. I think the above was true of your initial draft Martin, but is significantly less true of the current draft that includes an IANA registry setup with the specification required proced

[TLS] Re: 2nd Working Group Last Call for The SSLKEYLOGFILE Formatfor TLS

2025-02-25 Thread Arnaud Taddei
+1 Arnaud Taddei Global Security Strategist | Enterprise Security Group | ITU-T SG17 chair mobile: +41 79 506 1129 Geneva, Switzerland arnaud.tad...@broadcom.com | broadcom.com On Tue, Feb 25, 2025 at 3:38 PM Salz, Rich wrote: > I fully agree with Martin. IETF has historically not been ju