Re: [TLS] Security today

[Yoav Nir <ynir at checkpoint.com>]

On Mar 29, 2008, at 8:31 PM, Mike wrote:
>>>> 3. The major servers support ephemeral DH, as do many clients.
>>> This is where you are wrong.  Here is a list of servers that will
>>> not negotiate DHE_RSA with any of AES128, AES256, or DES3:
>>
>> I'm talking about the implementations, not the server operators.
>> The server operators have chosen not to turn it on.
>
> And that is precisely why they need a document telling them just
> how damaging that choice is.  Which do you think will get more
> attention, a whitepaper outlining the dangers of not using DHE
> preferentially, written by some random guy named Mike, or the
> same paper with the backing of the TLS WG of the IETF Internet
> Security area?

I think most vendors can't tell the difference between an  
Informational RFC and a standards-track RFC, and they definitely can't  
tell the difference between some guy named Mike and some guy named  
Eric from "RTMF Inc." This is meaningful for people who regularly read  
IETF mailing lists or attend the meetings.

You may want to find some co-author. Two authors from difference  
organizations give an RFC more prestige, especially if one is from a  
university. Of course if you could get Bruce himself..., but I get a  
feeling he doesn't like standards bodies very much.
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls