Re: [TLS] RFC 2817 proposed standard status revocation?

Peter Williams <home_pw@msn.com> wrote:
> I assume this WG is, or would be, responsible for handling RFC2817
> standards track issues?http://tools.ietf.org/html/rfc2817.
>  
> I record my recommendation that the cited document have its PROPOSED
> STANDARD status revoked. Period. Its bad (SSL) theory, and even worse
> practice.

I more or less agree with you that the HTTP Upgrade part of
RFC 2817 is a bad idea, but I hardly think it's worth the
trouble to have it moved to Historical, esp. since 2817
also standardizes the CONNECT method, which is quite widely
used.

> Never ever forget, SSL was intended as an IPSEC stopgap. In IETF, dont
> force TLS into a long term position in the internet security
> architecture that it doesn't deserve (e.g. RFC2817). It is SUPPOSED to
> go away, at some point.

Regardless of what the intentions of the SSL designers were,
it's now quite clear that TLS is generally applicable. I
don't agree that if IPsec suddenly became widely available
people would suddenly stop being interested in TLS. While
it may be true that TLS will go away at some point, that's
not something the IETF is planning for.

-Ekr

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls