Andrei Popov <Andrei.Popov=40microsoft....@dmarc.ietf.org> writes:

>I'm with Richard on this one. Not a fan of the "mTLS" concept: it causes
>confusion where customers ask whether "mTLS" is a different protocol or a
>specific TLS implementation? However, it can be argued that this unfortunate
>term has already taken root.

+1, Richard pretty much said everything I have concerns about but saved me a
lot of typing.  mTLS *is* TLS, there's no need to give it a special name for
marketing(?) purposes.

Having said that, I'd have no problems with a "TLS Profile for xxx", which is
what it really seems to be.

(And I'll add an obligatory comment that what (m)TLS does isn't mutual
authentication, it's unidirectional authentication in both directions, but
that boat has long since sailed.  If you wanted to have actual mTLS it'd have
to use PSK).

Peter.
_______________________________________________
TLS mailing list -- tls@ietf.org
To unsubscribe send an email to tls-le...@ietf.org

Reply via email to