From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <12a5d5137090880352ee920c81b7a571@felloff.net>
Date: Sun,  3 Jan 2016 05:03:03 +0100
From: cinap_lenrek@felloff.net
To: 9fans@9fans.net
In-Reply-To: <CAOw7k5gn2Zm3nvLCdSN1L1TCEbS1aPnfOLjKMvnnhd1FrtJVVg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Subject: Re: [9fans] using tls-psk cipher suits vs roll our own handshake
Topicbox-Message-UUID: 7d4b34f8-ead9-11e9-9d60-3106f5b1d025

> I could never work up much enthusiasm for TLS because it is needlessly big
> and complex, but still got important things wrong.
> I never saw the advantage of TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA as opposed
> to exchanging a few bits of text,
> allowing easy extension of the protocol to the occasional new protocol.

if you dont want negotiation, then we need to come up with new default
encryption scheme that will work perfectly for a long time. i cannot promise
that. with negotiation, stuff will get more complex but at least we can
fix and upgrade one machine at a time and get the best possible option
for each conversation.

what would you do?

--
cinap