Apologies, I maybe should have sent this earlier, but Rich Salz’s secdir reminded me to forward this IETF LC due to the application-focused nature of this I-D.
Cheers, spt > Begin forwarded message: > > From: The IESG <iesg-secret...@ietf.org> > Subject: Last Call: <draft-ietf-tls-external-psk-guidance-03.txt> (Guidance > for External PSK Usage in TLS) to Informational RFC > Date: October 29, 2021 at 12:16:38 EDT > To: "IETF-Announce" <ietf-annou...@ietf.org> > Cc: draft-ietf-tls-external-psk-guida...@ietf.org, ka...@mit.edu, > s...@sn3rd.com, tls-cha...@ietf.org, t...@ietf.org > Reply-To: last-c...@ietf.org > > > The IESG has received a request from the Transport Layer Security WG (tls) to > consider the following document: - 'Guidance for External PSK Usage in TLS' > <draft-ietf-tls-external-psk-guidance-03.txt> as Informational RFC > > The IESG plans to make a decision in the next few weeks, and solicits final > comments on this action. Please send substantive comments to the > last-c...@ietf.org mailing lists by 2021-11-19. Exceptionally, comments may > be sent to i...@ietf.org instead. In either case, please retain the beginning > of the Subject line to allow automated sorting. > > Abstract > > > This document provides usage guidance for external Pre-Shared Keys > (PSKs) in Transport Layer Security (TLS) 1.3 as defined in RFC 8446. > This document lists TLS security properties provided by PSKs under > certain assumptions, and then demonstrates how violations of these > assumptions lead to attacks. This document discusses PSK use cases > and provisioning processes. This document provides advice for > applications to help meet these assumptions. This document also > lists the privacy and security properties that are not provided by > TLS 1.3 when external PSKs are used. > > > > > The file can be obtained via > https://datatracker.ietf.org/doc/draft-ietf-tls-external-psk-guidance/ > > > > No IPR declarations have been submitted directly on this I-D. > > > > >
_______________________________________________ Uta mailing list Uta@ietf.org https://www.ietf.org/mailman/listinfo/uta
