Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-13 Thread Hubert Kario
On Thursday, 12 December 2019 21:55:42 CET, Nick Harper wrote: On Thu, Dec 12, 2019 at 8:27 AM Hubert Kario wrote: On Thursday, 12 December 2019 16:50:45 CET, David Benjamin wrote: On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: ... so because Google decided one thing, everybody has

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Hubert Kario
On Thursday, 12 December 2019 16:50:45 CET, David Benjamin wrote: On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: On Wednesday, 11 December 2019 18:06:19 CET, David Benjamin wrote: ... ... some TLS stacks don't support renegotiation as a server at all (BoringSSL and Go). ... Chrome

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Hubert Kario
On Thursday, 12 December 2019 16:26:41 CET, Ryan Sleevi wrote: On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: If TLS 1.2 was looking insecure, I would be with you on this one. But given that TLS 1.2 can be configured to be as secure as TLS 1.3, I think introducing weak points to TLS

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread David Benjamin
On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: > On Wednesday, 11 December 2019 18:06:19 CET, David Benjamin wrote: > > On Wed, Dec 11, 2019 at 9:22 AM Ilari Liusvaara < > ilariliusva...@welho.com> > > wrote: > > > >> On Wed, Dec 11, 2019 at 02:21:48PM +0100, Hubert Kario wrote: > >>> On

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Ryan Sleevi
On Thu, Dec 12, 2019 at 6:51 AM Hubert Kario wrote: > If TLS 1.2 was looking insecure, I would be with you on this one. But given > that TLS 1.2 can be configured to be as secure as TLS 1.3, I think > introducing > weak points to TLS 1.3, weak points we will have to live with for the next >

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Filippo Valsorda
2019-12-12 06:51 GMT-05:00 Hubert Kario : > On Wednesday, 11 December 2019 18:06:19 CET, David Benjamin wrote: > > On Wed, Dec 11, 2019 at 9:22 AM Ilari Liusvaara > > wrote: > > > >> On Wed, Dec 11, 2019 at 02:21:48PM +0100, Hubert Kario wrote: > >>> On Saturday, 7 December 2019 11:20:17 CET,

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-12 Thread Hubert Kario
On Wednesday, 11 December 2019 18:06:19 CET, David Benjamin wrote: On Wed, Dec 11, 2019 at 9:22 AM Ilari Liusvaara wrote: On Wed, Dec 11, 2019 at 02:21:48PM +0100, Hubert Kario wrote: On Saturday, 7 December 2019 11:20:17 CET, Ilari Liusvaara wrote: One test I just tried: - Smartcard

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-11 Thread David Benjamin
On Wed, Dec 11, 2019 at 9:22 AM Ilari Liusvaara wrote: > On Wed, Dec 11, 2019 at 02:21:48PM +0100, Hubert Kario wrote: > > On Saturday, 7 December 2019 11:20:17 CET, Ilari Liusvaara wrote: > > > > > > One test I just tried: > > > > > > - Smartcard capable of raw RSA. > > > - OpenSC PKCS#11

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-11 Thread Ilari Liusvaara
On Wed, Dec 11, 2019 at 02:21:48PM +0100, Hubert Kario wrote: > On Saturday, 7 December 2019 11:20:17 CET, Ilari Liusvaara wrote: > > > > One test I just tried: > > > > - Smartcard capable of raw RSA. > > - OpenSC PKCS#11 drivers. > > - Firefox ESR 68 > > - Server supports TLS 1.3 (Accept RSA

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-11 Thread Hubert Kario
On Saturday, 7 December 2019 11:20:17 CET, Ilari Liusvaara wrote: On Fri, Dec 06, 2019 at 11:09:48AM -0600, Darin Pettis wrote: On Thu, Nov 14, 2019 at 4:43 PM Adam Langley wrote: People on this list who manage large corporate networks may wish to pay attention to this: while you may not have

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-07 Thread Ilari Liusvaara
On Fri, Dec 06, 2019 at 11:09:48AM -0600, Darin Pettis wrote: > On Thu, Nov 14, 2019 at 4:43 PM Adam Langley wrote: > > People on this list who manage large corporate networks may wish to pay > > attention to this: while you may not have updated servers to TLS 1.3 yet, > > eventually it'll happen

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-12-06 Thread Darin Pettis
On Thu, Nov 14, 2019 at 4:43 PM Adam Langley wrote: People on this list who manage large corporate networks may wish to pay attention to this: while you may not have updated servers to TLS 1.3 yet, eventually it'll happen and I suspect some will find a significant amount of things like TPMs, in

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-11-14 Thread Adam Langley
On Mon, Nov 11, 2019 at 11:33 AM Christopher Wood wrote: > The adoption call is now (belatedly) finished. At this time, there's not > enough interest to take this on as a WG item. We encourage further > discussion on the list, perhaps based on subsequent draft updates, and will > revisit

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-11-11 Thread Christopher Wood
The adoption call is now (belatedly) finished. At this time, there's not enough interest to take this on as a WG item. We encourage further discussion on the list, perhaps based on subsequent draft updates, and will revisit adoption in the future if interest grows. Best, Chris (on behalf of

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-10-21 Thread Sean Turner
> On Oct 21, 2019, at 12:19, David Benjamin wrote: > > (What's the usual order of operations here? It seems weird to change a > document mid-adoption-call, and, if the document is adopted, it also seems > weird to make the first TLSWG revision different from the document from the > adoption

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-10-21 Thread David Benjamin
On Mon, Oct 21, 2019 at 12:11 PM Richard Barnes wrote: > On Mon, Oct 21, 2019 at 11:44 AM David Benjamin > wrote: > >> On Mon, Oct 21, 2019 at 9:42 AM Hubert Kario wrote: >> >>> On Friday, 18 October 2019 20:44:03 CEST Christopher Wood wrote: >>> > This email starts a call for adoption of

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-10-21 Thread Hubert Kario
On Monday, 21 October 2019 17:43:52 CEST David Benjamin wrote: > On Mon, Oct 21, 2019 at 9:42 AM Hubert Kario wrote: > > On Friday, 18 October 2019 20:44:03 CEST Christopher Wood wrote: > > > This email starts a call for adoption of draft-davidben-tls13-pkcs1-00, > > > > > > which can be found

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-10-21 Thread Richard Barnes
On Mon, Oct 21, 2019 at 11:44 AM David Benjamin wrote: > On Mon, Oct 21, 2019 at 9:42 AM Hubert Kario wrote: > >> On Friday, 18 October 2019 20:44:03 CEST Christopher Wood wrote: >> > This email starts a call for adoption of draft-davidben-tls13-pkcs1-00, >> > which can be found here: >> > >> >

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-10-21 Thread David Benjamin
On Mon, Oct 21, 2019 at 9:42 AM Hubert Kario wrote: > On Friday, 18 October 2019 20:44:03 CEST Christopher Wood wrote: > > This email starts a call for adoption of draft-davidben-tls13-pkcs1-00, > > which can be found here: > > > >https://tools.ietf.org/html/draft-davidben-tls13-pkcs1-00 > >

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-10-21 Thread Hubert Kario
On Friday, 18 October 2019 20:44:03 CEST Christopher Wood wrote: > This email starts a call for adoption of draft-davidben-tls13-pkcs1-00, > which can be found here: > >https://tools.ietf.org/html/draft-davidben-tls13-pkcs1-00 > > It will run until November 1, 2019. Please indicate whether

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-10-18 Thread David Benjamin
I also support adoption and will contribute, unsurprisingly. :-) On Fri, Oct 18, 2019 at 2:46 PM Salz, Rich wrote: > I support adoption, will contribute. > > ___ > TLS mailing list > TLS@ietf.org > https://www.ietf.org/mailman/listinfo/tls >

Re: [TLS] Adoption call for draft-davidben-tls13-pkcs1

2019-10-18 Thread Salz, Rich
I support adoption, will contribute. ___ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls