[TLS] Re: WGLC: draft-ietf-tls-srp-13

[Simon Josefsson <simon@xxxxxxxxxxxxx>]

EKR <ekr@xxxxxxxxxxxxxxxxxxxx> writes:

> This is a Working Group Last Call for draft-ietf-tls-srp-13.
>
> This document is intended for Experimental status. Please provide
> comments to the authors and the list.
>
> This WGLC will end Fri Jan 12 (to allow time for people's holidays).

The document seems fine, but the intended status bothers me.  Changing
the cipher suite numbers because the document now targets experimental
status will disrupt deployed implementations and harms adoption of the
protocol.  Also, for this particular protocol, I believe its already
wide deployment suggests that PS is the appropriate choice.

However, as a general issue, it seems unfortunate that ciphersuite
numbers are tightly connected to the IETF standards track category.
If I recall correctly, successful documents on the Experimental track
may later be revised into Proposed Standards.  Will the ciphersuite
numbers then change?  This seems to be a general problem with the core
TLS specification, and doesn't seem to be fully thought out.

I suggest that for future TLS revisions, it should be considered
whether to remove the distinction of standards-track numbers and
non-standards track number, and that it becomes easier to have IANA
perform early allocation of TLS ciphersuite numbers to help
implementers test new TLS draft.

/Simon

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls