From: cinap_lenrek@felloff.net
To: 9fans@9fans.net
Subject: Re: [9fans] using tls-psk cipher suits vs roll our own handshake
Date: Sun, 3 Jan 2016 05:03:03 +0100 [thread overview]
Message-ID: <12a5d5137090880352ee920c81b7a571@felloff.net> (raw)
In-Reply-To: <CAOw7k5gn2Zm3nvLCdSN1L1TCEbS1aPnfOLjKMvnnhd1FrtJVVg@mail.gmail.com>
> I could never work up much enthusiasm for TLS because it is needlessly big
> and complex, but still got important things wrong.
> I never saw the advantage of TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA as opposed
> to exchanging a few bits of text,
> allowing easy extension of the protocol to the occasional new protocol.
if you dont want negotiation, then we need to come up with new default
encryption scheme that will work perfectly for a long time. i cannot promise
that. with negotiation, stuff will get more complex but at least we can
fix and upgrade one machine at a time and get the best possible option
for each conversation.
what would you do?
--
cinap
next prev parent reply other threads:[~2016-01-03 4:03 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-12-24 16:45 cinap_lenrek
2015-12-24 17:09 ` Iruatã Souza
2015-12-24 23:49 ` cinap_lenrek
2015-12-25 2:34 ` Alex Weber
2015-12-25 3:03 ` cinap_lenrek
2015-12-29 18:34 ` Charles Forsyth
2015-12-29 18:35 ` Charles Forsyth
2016-01-03 4:03 ` cinap_lenrek [this message]
2015-12-29 20:31 ` Kenny Lasse Hoff Levinsen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=12a5d5137090880352ee920c81b7a571@felloff.net \
--to=cinap_lenrek@felloff.net \
--cc=9fans@9fans.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).