Subject: [Unbearable] [TokenBinding/Internet-Drafts] Reconcile interactions between TBNEGO and TLS 1.3 (#98)

From: Nick Harper <[email-masked]>
Date: Wed, 29 Mar 2017 15:24:41 -0700

(from https://mailarchive.ietf.org/arch/msg/unbearable/iA18qpvoIlFo9umezrC_Bhjk57M)

TLS 1.3 specifies that "Future extensions MUST define their interaction with 0-RTT."

I see two potential options to reconcile this disagreement:

1) Have TBNEGO specify something like "Token Binding and 0-RTT MUST NOT both be negotiated on the same connection" and let draft-ietf-tokbind-tls13-0rtt update TBNEGO later.
2) Specify in TBNEGO a max TLS version of 1.2, and have draft-ietf-tokbind-tls13-0rtt or another draft specify the behavior of the extension in TLS 1.3 and higher.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/TokenBinding/Internet-Drafts/issues/98