From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 In-Reply-To: <7cce8a1dde0616a1f6c3960ed928f0e0@felloff.net> References: <7cce8a1dde0616a1f6c3960ed928f0e0@felloff.net> Date: Tue, 29 Dec 2015 18:34:49 +0000 Message-ID: From: Charles Forsyth To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net> Content-Type: multipart/alternative; boundary=001a114436a83bea7205280dad8b Subject: Re: [9fans] using tls-psk cipher suits vs roll our own handshake Topicbox-Message-UUID: 7b2e4cbe-ead9-11e9-9d60-3106f5b1d025 --001a114436a83bea7205280dad8b Content-Type: text/plain; charset=UTF-8 On 25 December 2015 at 03:03, wrote: > > the functionality that is desired is to be able to "negotiate" the > cipher suits and record layer protocol versions. I could never work up much enthusiasm for TLS because it is needlessly big and complex, but still got important things wrong. I never saw the advantage of TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA as opposed to exchanging a few bits of text, allowing easy extension of the protocol to the occasional new protocol. The main reason for using it for 9P would be to make it easier to communicate with 9P services running on other platforms, but my experience with Java was that in the end, the service provider factories couldn't make anything I wanted to use. In particular, I couldn't replace the dreadful CA-oriented x.509 certificates and asn.1 by something else. Anything, really. I also wasn't given planning permission to build my own factory. You get all the bugs, though. --001a114436a83bea7205280dad8b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

= On 25 December 2015 at 03:03, <cinap_lenrek@felloff.net> wrote:

the functionality that is desired is to be able to "negotiate" th= e
cipher suits and record layer protocol versions.

I co= uld never work up much enthusiasm for TLS because it is needlessly big and = complex, but still got important things wrong.
I never saw the advantage of=C2=A0TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA as opposed to ex= changing a few bits of text,
allowing easy extens= ion of the protocol to the occasional new protocol.

The main reason for using i= t for 9P would be to make it easier to communicate with 9P services running= on other platforms,
but my experience with= Java was that in the end, the service provider factories couldn't make= anything I wanted to use.
In particular, I= couldn't replace the dreadful CA-oriented x.509 certificates and asn.1= by something else. Anything, really.
I also wasn't given planning permission to build = my own factory. You get all the bugs, though.
--001a114436a83bea7205280dad8b--