Subject: [saag] tls@ietf110: saag report

From: Sean Turner <[email-masked]>
Date: Thu, 11 Mar 2021 07:14:51 -0500

There is now an automated TLS interoperability site, heavily influenced by the QUIC interoperability site. It us up and running. Get your implementations in now! [1].

ECH is still a thing, getting implementation experience [2]. Will schedule a meeting in the coming weeks to continue discussions.

8446bis is moving along [3]. There are few open issues open to resolve that will result in another revision. Once issue that will be moved to an 8447bis is the idea of adding more nuance to the definition of the “recommended” column.

TLS Proof of Knowledge needs some work [4].

Deprecating FFDHE cipher suite is under considerations [5]. The subtleties will be discussed on the list.

Opaque with TLS, which based on a CFRG I-D, was also discussed. The intent is to combine password-based authentication with traditional PKI-based authentication.

[1] https://datatracker.ietf.org/meeting/110/materials/slides-110-tls-tls-interop-runner-00
[2] https://datatracker.ietf.org/meeting/110/materials/slides-110-tls-encrypted-client-hello-00
[3] https://datatracker.ietf.org/meeting/110/materials/slides-110-tls-rfc-8446bis-00
[4] https://datatracker.ietf.org/meeting/110/materials/slides-110-tls-tls-proof-of-knowledge-01
[5] https://datatracker.ietf.org/meeting/110/materials/slides-110-tls-deprecating-ffdh-revised-00