Folks, I've just submitted TLS 1.3 draft-12 and it should appear once it makes its way through secretariat processing. Until then, you can find it at:
http://tlswg.github.io/tls13-spec/ This revision is largely cleanup of a bunch of outstanding PRs and of issues found during interop testing. It should be largely wire compatible with draft-11 and also defines preliminary code points in a few places where we had to define them to do implementations. I've attached a changelog to the end of this message. Note: I have taken no action on the topic of 0-RTT DHE (both with and without Client Authentication). I believe we are nearing consensus but I'll work with the chairs to bring it to resolution. Also, look for a proposal to flesh out the details of 0-RTT PSK, which I recognize is currently underspecified. As usual, please send comments to the list or as Github PRs. Thanks -Ekr CHANGELOG - Provide a list of the PSK cipher sutes. - Remove the ability for the ServerHello to have no extensions (this aligns the syntax with the text). - Clarify that the server can send application data after its first flight (0.5 RTT data) - Revise signature algorithm negotiation to group hash, signature algorithm, and curve together. This is backwards compatible. - Make ticket lifetime mandatory and limit it to a week. - Make the purpose strings lower-case. This matches how people are implementing for interop. - Define exporters. - Editorial cleanup
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls