Subject: [Unbearable] New TBNEGO, TBPROTO, HTTPSTB Revisions

From: Andrei Popov <[email-masked]>
Date: Wed, 23 Nov 2016 20:02:10 +0000

Updated versions of the Token Binding I-Ds address WGLC comments we've received so far:

1.       Connection termination is no longer required when TB validation fails;

2.       Applications other than Web browsers MAY use key scoping rules other than eTLS+1;

3.       Issues and requirements related to TLS renegotiation are described;

4.       Signaling mechanisms other than Include-Referred-Token-Binding-ID HTTP response header are explicitly allowed;

5.       Renegotiation Indication TLS extension is required in all cases (again);

6.       EKM length is defined at 32 bytes for the currently defined signature schemes, but could be longer in the future.

Cheers,

Andrei