TLS S. Santesson
Internet-Draft 3xA Security AB
Intended status: Standards Track H. Tschofenig
Expires: September 29, 2013 Nokia Siemens Networks
March 28, 2013
Transport Layer Security (TLS) Cached Information Extension
draft-ietf-tls-cached-info-14.txt
Abstract
Transport Layer Security (TLS) handshakes often include fairly static
information, such as the server certificate and a list of trusted
Certification Authorities (CAs). This information can be of
considerable size, particularly if the server certificate is bundled
with a complete certificate path (including all intermediary
certificates up to the trust anchor public key).
This document defines an extension that omits the exchange of already
available information. The TLS client informs a server of cached
information, for example from a previous TLS handshake, allowing the
server to omit the already available information.
Status of this Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at http://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on September 29, 2013.
Copyright Notice
Copyright (c) 2013 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
Santesson & Tschofenig Expires September 29, 2013 [Page 1]
Internet-Draft TLS Cached Information Extension March 2013
(http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3
2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 4
3. Cached Information Extension . . . . . . . . . . . . . . . . . 5
4. Exchange Specification . . . . . . . . . . . . . . . . . . . . 7
4.1. Omitting the Certificate Chain . . . . . . . . . . . . . . 7
4.2. Omitting the Trusted CAs . . . . . . . . . . . . . . . . . 8
5. Example . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
6. Security Considerations . . . . . . . . . . . . . . . . . . . 11
7. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 12
7.1. New Entry to the TLS ExtensionType Registry . . . . . . . 12
7.2. New Registry for CachedInformationType . . . . . . . . . . 12
8. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 13
9. References . . . . . . . . . . . . . . . . . . . . . . . . . . 14
9.1. Normative References . . . . . . . . . . . . . . . . . . . 14
9.2. Informative References . . . . . . . . . . . . . . . . . . 14
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 15
Santesson & Tschofenig Expires September 29, 2013 [Page 2]
Internet-Draft TLS Cached Information Extension March 2013
1. Introduction
Transport Layer Security (TLS) handshakes often include fairly static
information, such as the server certificate and a list of trusted
Certification Authorities (CAs). This information can be of
considerable size, particularly if the server certificate is bundled
with a complete certificate path (including all intermediary
certificates up to the trust anchor public key).
Optimizing the exchange of information to a minimum helps to improve
performance in environments where devices are connected to a network
with characteristics like low bandwidth, high latency and high loss
rate. These types of networks exist, for example, when smart objects
datatracker.ietf.org