Transport Layer Security (tls)

Resources changed to github_org https://github.com/tlswg/ (Github), webpage https://tlswg.org (Home Page), webpage https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml (IANA TLS Extension Registry), webpage https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml (IANA TLS Parameter Registry), wiki https://github.com/tlswg/tlswg-wiki (Wiki), zulip https://zulip.ietf.org/#narrow/stream/140-tls (Zulip Stream) from github_org https://github.com/tlswg/ (Github), webpage https://tlswg.org (Home Page), webpage https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml (IANA TLS Extension Registry), webpage https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml (IANA TLS Parameter Registry), wiki https://github.com/tlswg/tlswg-wiki (Wiki)

Resources changed to github_org https://github.com/tlswg/ (Github), webpage https://tlswg.org (Home Page), webpage https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml (IANA TLS Extension Registry), webpage https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml (IANA TLS Parameter Registry), wiki https://github.com/tlswg/tlswg-wiki (Wiki) from github_org https://github.com/tlswg/ (Github), webpage https://tlswg.org (Home Page), webpage https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml (TLS Extension Registry), webpage https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml (TLS Parameter Registry), wiki https://github.com/tlswg/tlswg-wiki (Wiki)

Resources changed to github_org https://github.com/tlswg/ (Github), webpage https://tlswg.org (Home Page), webpage https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml (TLS Extension Registry), webpage https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml (TLS Parameter Registry), wiki https://github.com/tlswg/tlswg-wiki (Wiki) from github_org https://github.com/tlswg/ (Github), webpage https://tlswg.org (Home Page), wiki https://github.com/tlswg/tlswg-wiki (Wiki)

The WG discussed remaining outstanding issues for draft-ietf-tls-dtls13-29.  Version -30 was posted and will enter WGLC shortly.  draft-ietf-tls-dtls-connection-id and draft-ietf-tls-exported-authenticator are now in WGLC. With some minors tweaks draft-ietf-tls-grease will also be ready for WGLC.

draft-ietf-tls-oldversions-deprecate, which was adopted since IETF102, will be revised to indicate which RFCs normatively depend on TLS 1.0 and 1.1 and then will likely be ready for WGLC.

Changes to draft-ietf-tls-esni (i.e., using ENSI RRType instead of TXT record) and its operational issues (i.e., hardfails and multi-CDNs) were discussed. The draft needs additional reviews from DNS folks.

draft-housley-tls-tls13-cert-with-extern-psk was scoped down to be for external PSKs for initial handshakes.  The sense of the room was to adopt the draft as a WG Item. This will be confirmed on list.

draft-tls-certieee1609 will be used as the basis for a TLS Certificate Type code point request. The WG will not consider it for adoption.

draft-wood-tls-external-psk-importer was discussed as a way forward for external PSKs with TLS 1.3. More discussion and comparison to draft-davidben-tls-universal-psk is needed.

Updates to draft-wood-tls-ticketrequests were discussed. The WG considers it a potential WG item. This will be confirmed on list.

The WG had a lengthy discussion about draft-ietf-tls-dnssec-chain-extension and there was WG consensus to drop the draft as a WG item.

The TLS working group met on Tuesday morning. We are continuing progress on TLS 1.3. Main discussion points included a change in the cipher suite model from a monolithic ID approach to a menu based approach. During the Hackathon on Saturday we had 7 different TLS 1.3 implementations achieve interoperability to various degrees. We expect to have a draft (probably -16) that "freezes" the wire format at the end of next month available for broad review by the cryptographic and security modeling communities. We plan on holding working group last call before the next IETF.