Why would these schools settle for a half measure that only allows them
to snoop on traffic between their students and servers provide the keys
to their Internet traffic to the schools? If a school wants to snoop on
its students' traffic, it would do so in a much easier way than using
draft-rhrd-tls-tls13-visibility, in the same way that some enterprises
today use middleboxes to inspect all outgoing traffic.
This browser that students would be required to use would be one that
has a CA controlled by the middlebox installed as a trust anchor.
Whenever one of the students' clients tries to connect to an external
secure site, the middlebox-controlled CA issues a certificate for that
site so that the connection can be terminated at the middlebox. The
middlebox then establishes a secure connection with the end server, thus
setting up the middlebox as a MiTM.
There are already middleboxes on the market today that do this. They
work for all outgoing connections and don't require any cooperation
whatsoever from the outside servers that the clients are trying to
connect to, and only expert users would notice the presence of the MiTM.
Given that such an effective and simple-to-implement solution is already
available today, why would these schools be so anxious to use a
complicated-to-implement and largely ineffective solution such as
subverting draft-rhrd-tls-tls13-visibility for improper purposes?
On 10/24/2017 03:36 PM, Yoav Nir wrote:
On 24 Oct 2017, at 22:27, Ralph Droms <rdroms.i...@gmail.com> wrote:
On Oct 24, 2017, at 3:23 PM, Salz, Rich <rs...@akamai.com> wrote:
I use an airplane as an example of a “captive” population, substitute any
similar group you want.
• Yes, any box that sits between the client and the server can drop
traffic for whatever reason it wants. Such a box could today drop any traffic
that is protected using TLS.
True, but that’s not the point. The point is by adding this extension into the
clientHello, we are providing middleboxes with another knob to control traffic.
I think we want to avoid that. And keep in mind it’s not just HTTP, but *any*
TLS-using traffic, such as many VPN’s. It wouldn’t necessarily enable spying,
but it could be used to guarantee that all traffic is amenable to spying.
As for how would such clients get promulgated? Some simple scenarious include
“surf for free on your flight, but use our Chromium-based browser to do so,
available for free here.” How many people on the plane would click and
download?
Just to make sure I understand, in this scenario the special-purpose browser
could just as easily, today, be a browser with no TLS at all? That is, I
don't see why this scenario is specific to the visibility extension.
Think of the children.
We can’t just let them loose on the Internet, there’s predators out there. So
we will snoop on their traffic. To do that, we block all traffic that isn’t
snoopable, and we do it at the edge router in schools. All schools in our
state are required by law to install a firewall that does this. And we get the
mobile operators to do so as well (only for handsets in schools).
Now either the mobile OS vendors make a browser that works in schools (at least
with a setting), or the school recommends a third party browser that works in
school. And best of all, this is *more secure* than regular TLS 1.3, because it
also protects your children from Internet predators. Think of the children.
You can’t make a claim like that for an HTTP-only browser, and worse still, it
won’t work on much of today’s Internet.
Yoav
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls
