Re: [TLS] TLS renegotiation issue

[Michael Gray <mickgray at au1.ibm.com>]

Eric Rescorla <ekr at rtfm.com> wrote:

> well, that was really complete, but the link below is even more so!
>
>
http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html

>
>
> On Thu, Nov 5, 2009 at 12:57 PM, Eric Rescorla <ekr at rtfm.com> wrote:
> > FWIW, here's my more complete analysis.
> >
> > -Ekr

IMHO The proposed fix looks to be also introducing the concept of
Retrospective Trust into TLS.  This being necessary due to the problem
highlighted in the HTTP protocol in that it will process messages that
arrived prior to authentication etc.  However, IMHO I would guess that once
TLS is perhaps protected, then the attacker will simply attack at some
other level as the HTTP/Web Application is still vulnerable. IMHO these
other attacks might be easier to do and perhaps at the same time harder to
detect.  My view is that implying Retrospective Trust in TLS will lure
application developers into incorrectly thinking they are now (or are
still) safe and continue the IMHO dangerous practice of Retrospective
Trust.  IMHO I would question why allowing the concept of Retrospective
Trust into TLS is not inherently dangerous.

Mick Gray

P.S. - The opinions above are my own, and not necessarily those of my
employer.

> >
> _______________________________________________
> TLS mailing list
> TLS at ietf.org
> https://www.ietf.org/mailman/listinfo/tls