[TLS] Upgrading TLS session resumption from TLS 1.2 to TLS 1.3?

2021-06-24 Thread Soni L.
What's the story on backwards compatibility between TLS 1.2 session resumption and TLS 1.3 session resumption? Appendix D. Backward Compatibility doesn't seem to say anything about it. It seems like TLS 1.2 session resumption is gonna keep using TLS 1.2 even if both sides support TLS 1.3?

Re: [TLS] Upgrading TLS session resumption from TLS 1.2 to TLS 1.3?

2021-06-24 Thread Soni L.
ons, and newer > versions. The server evaluates its preferences and then only resumes > if the session is consistent with them. > > David > > On Thu, Jun 24, 2021 at 8:50 AM Soni L. <mailto:fakedme%2b...@gmail.com>> wrote: > > What's the story on backwar

[TLS] E164 in X509

2022-10-12 Thread Soni L.
Hello, Is there a possibility to support E164 in X509, for DTLS over SMS? Thanks. ___ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls

Re: [TLS] [EXTERNAL] Re: Servers sending CA names

2023-04-18 Thread Soni L.
So like a "client" cert is just a way to say "yes I'm really example.org" yeah? That seems particularly useful for federated networks (XMPP, etc). Why not call these server-to-server certs? On 4/18/23 20:45, Peter Gutmann wrote: Richard Barnes writes: >Let's Encrypt issues roughly 3 millio

[TLS] Tricking TLS library into crypto primitives library

2023-06-25 Thread Soni L.
Has anyone done any work towards tricking a TLS library into providing cryptographic primitives? We know of similar work with regards to javacard https://arxiv.org/abs/1810.01662 but not sure if it can be applied to TLS. ___ TLS mailing list TLS@ietf

Re: [TLS] Tricking TLS library into crypto primitives library

2023-06-25 Thread Soni L.
point is to use AES for non-TLS protocols. On 6/25/23 14:15, Eric Rescorla wrote: I'm not aware of any. Why would you want to do this? Most such libraries I am aware of expose low-level primitives or are built on libraries which do. -Ekr On Sun, Jun 25, 2023 at 6:28 AM Soni L. <mail

Re: [TLS] Tricking TLS library into crypto primitives library

2023-06-25 Thread Soni L.
t with what you would get if you just used a typical AES library. -Ekr On Sun, Jun 25, 2023 at 10:21 AM Soni L. <mailto:fakedme%2b...@gmail.com>> wrote: Python doesn't expose raw AES, etc. But it does expose a fairly rich TLS library. Wondering if it would be possible to jus