On 11/09/2016 11:42 AM, Martin Rex wrote: > Nobody so far has provide a single example of *REAL* value. > For the hiding of ContentType to provide real value, the prerequisites are: > > (1) this value will be _unconditionally_ provided in TLSv1.3 > > (2) this value can be demonstrated to be a real security issue in TLSv1.2, > for existing usage scenarios, where hiding of ContentType is not > available > > Anyhing less is no value, just an illusion of value.
Thanks for clarifying your position. I don't think many of the other people in the thread are using the same definition of "value", which has led to a lot of confusion. However, I'm not convinced that the concrete benefit needs to be mandatory-to-use in TLS 1.3 to be considered to provide value. For example, I personally value having the option to have my car's air conditioning unit cool the interior temperature, but I wouldn't want it to be the only way to cool the interior -- the rush of wind through the windows is a different experience. That is, having an option can in itself provide value to some people in some situations. -Ben
_______________________________________________ TLS mailing list [email protected] https://www.ietf.org/mailman/listinfo/tls
