Re: [TLS] Mirja Kühlewind's No Objection on draft-ietf-tls-tls13-cert-with-extern-psk-03: (with COMMENT)

2019-12-12 Thread Benjamin Kaduk
On Wed, Dec 11, 2019 at 12:48:58PM -0500, Russ Housley wrote: > Mirja: > > > -- > > COMMENT: > > -- > > > > Just a small thing to double-check: I wonder if this

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Hubert Kario
On Thursday, 12 December 2019 16:50:45 CET, David Benjamin wrote: On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: On Wednesday, 11 December 2019 18:06:19 CET, David Benjamin wrote: ... ... some TLS stacks don't support renegotiation as a server at all (BoringSSL and Go). ... Chrome

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Hubert Kario
On Thursday, 12 December 2019 16:26:41 CET, Ryan Sleevi wrote: On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: If TLS 1.2 was looking insecure, I would be with you on this one. But given that TLS 1.2 can be configured to be as secure as TLS 1.3, I think introducing weak points to TLS

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread David Benjamin
On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: > On Wednesday, 11 December 2019 18:06:19 CET, David Benjamin wrote: > > On Wed, Dec 11, 2019 at 9:22 AM Ilari Liusvaara < > ilariliusva...@welho.com> > > wrote: > > > >> On Wed, Dec 11, 2019 at 02:21:48PM +0100, Hubert Kario wrote: > >>> On

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Ryan Sleevi
On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: > If TLS 1.2 was looking insecure, I would be with you on this one. But given > that TLS 1.2 can be configured to be as secure as TLS 1.3, I think > introducing > weak points to TLS 1.3, weak points we will have to live with for the next >

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Filippo Valsorda
2019-12-12 06:51 GMT-05:00 Hubert Kario : > On Wednesday, 11 December 2019 18:06:19 CET, David Benjamin wrote: > > On Wed, Dec 11, 2019 at 9:22 AM Ilari Liusvaara > > wrote: > > > >> On Wed, Dec 11, 2019 at 02:21:48PM +0100, Hubert Kario wrote: > >>> On Saturday, 7 December 2019 11:20:17 CET,

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Hubert Kario
On Wednesday, 11 December 2019 18:06:19 CET, David Benjamin wrote: On Wed, Dec 11, 2019 at 9:22 AM Ilari Liusvaara wrote: On Wed, Dec 11, 2019 at 02:21:48PM +0100, Hubert Kario wrote: On Saturday, 7 December 2019 11:20:17 CET, Ilari Liusvaara wrote: One test I just tried: - Smartcard