Re: [TLS] Next steps for draft-ietf-tls-renegotiation

Pasi,

For the record I just need to say that I strongly disagree with this
decision.

We have two solutions on the table and the essence of them has been
concluded during the very last few days. I would say that the support for
either of the two approaches has been quite even lately. It surprises me
that we don't even have time to seriously ask the WG members what approach
they prefer.

I can just hope this in the end will turn out to be of service to the
community and that all implementers get this right. I would really hate for
us to conclude that we patched one vulnerable security design with another
due to implementer shortcomings, or that a large part of the community
turned off a useful TLS feature.

It was interesting to have the discussion.

/Stefan

On 09-11-27 11:26 PM, "Pasi.Eronen@nokia.com" <Pasi.Eronen@nokia.com> wrote:

> <wearing Area Director hat>
> 
> I have asked the secretariat to start IETF Last Call for
> draft-rescorla-tls-renegotiation-01.
> 
> I've gone through the list archives for the past month, and it seems a
> large majority of the WG members support the overall approach in this
> draft (with a small, but very vocal, minority preferring a totally
> extension-less approach to signalling).
> 
> I think the users of TLS at this point are served better by a timely
> solution that works and is "good enough", rather than continuing the
> tweaking. Especially since a large majority of the WG is OK with the
> signalling approach in the current draft, it looks like continuing to
> tweak the non-signalling parts is not going to provide any significant
> additional benefits to the users of TLS.
> 
> The exact text in the -01 draft is still a bit rough (a number of
> places could probably benefit from clarifications, and perhaps some
> implementation advice, too), and I hope we can continue improving it
> during the last call (for example, Martin's draft has lot of
> well-written text we should probably consider including here).
> 
> Best regards,
> Pasi
> IETF Security Area Director
> 
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls