Re: [TLS] comment on null encryption ciphersuite; https RFC amendment ...to compensate

["Steven M. Bellovin" <smb@xxxxxxxxxxxxxxx>]

On Sun, 19 Nov 2006 11:32:51 -0500, "Blumenthal, Uri"
<uri.blumenthal@xxxxxxxxx> wrote:

> Peter,
>  
> Whether you like it or not, but (a) there are applications that are OK
> with authentication/integrity only, and more importantly (b) some
> legistations and domains forbid encrypted channels, period. To address
> this reality, authentication-only TLS protocol suites are introduced.
> Their applicability is clear and limited - exactly as explicitly
> specified in the document.
>  
> Political balance and issues should be brought to US Congress and
> corresponding foreign bodies.

Uri: ever since the Danvers IETF -- April, 1995 -- the IETF has had a
policy of designing cryptographic mechanisms taking into account only
technical criteria, not political issues.  (Also see RFC 1984.)

		--Steven M. Bellovin, http://www.cs.columbia.edu/~smb

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls