Subject: [saag] IETF 89 TLS meeting Summary

From: "Joseph Salowey (jsalowey)" <[email-masked]>
Date: Wed, 5 Mar 2014 18:56:23 +0000

TLS met Tuesday afternoon

Discussion Summary:

+ draft-ietf-tls-encrypt-then-mac - draft will be submitted as working group item and should shortly be ready for working group last call

+ draft-moeller-tls-downgrade-scsv - The Chairs believe this is something the WG wants, so will approach the ADs about adding it to the charter

+ draft-mavrogiannopoulos-chacha-tls - merged draft on using ChaCha in TLS.  Needs review from TLS and CFRG groups.  Working towards a candidate that can be accepted as a working group item.

+ Explicit IVs in ChaCha - presentation on recommending use of explicit IVs in ChaCha ciphers.   This will be discussed on the list. 

+ Update from CFRG - TLS and CFRG chairs to coordinate on requests for CFRG evaluation

+ Session Resumption Issues -  attacks involving session resumption - http://secure-resumption.com

+ TLS 1.3 -  Presentation describing 1 RTT and 0 RTT flows.  Looked at possible deprecating some features

- There was support in the room for deprecating compression, to be verified on the list
- There was mixed response for the need to protect the SNI, to be discussed on the list
- There seemed to be support for supporting only AEAD algorithms, to be verified on the list
- There seemed to be support for removing static RSA ciphersuites (TLS-RSA-WITH-*) from 1.3, to be discussed and verified on the list
-  Mixed response on removing renegotiation, to be discussed on the list