On 10/23/2017 05:09 PM, Ackermann, Michael wrote: > No one I am aware of is pushing for a MitM capability to address > this. In fact it was one of the alternative solutions for which many > implementation issues were cited at the Prague meeting and on this > list. But I would like to ask, what is the solution that your > company and others that you reference, have solved this problem by > implementing?
Is not draft-rhrd-tls-tls13-visibility a MitM, in that the holder of the SSWrapDH1 private key has the cryptographic capability to inject traffic and modify plaintext for the affected connections? -Ben _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls