Re: [TLS] Security today

[Mike <mike-list at pobox.com>]

>> This is all well-known material amply covered in the cryptographic
>> literature. I don't see any benefit in the TLS WG rehashing
>> this territory.

I think you have been involved too long to know what is well-known
to a total beginner (me 2 years ago).  It wasn't until very recently
that I figured out that it would be perfectly fine for a CA with a
2000-bit keycertsign certificate to issue a 4000-bit keyencipherment
certificate.  Everything I've read indicates that key sizes from the
end entity up through the root need to be non-decreasing (of course
they should for all the CA's in the chain).

> For that matter, much of it is in "SSL and TLS: Designing and
> Building Secure Systems"

I've just ordered a copy, using 1024-bit RSA_RC4_MD5 from Amazon.
(I hadn't bought it before since I had already implemented SSL and
TLS when I first came across it.)

Mike
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls