Re: [TLS] Security today

[Eric Rescorla <ekr@xxxxxxxxxxxxxxxxxxxx>]

At Fri, 28 Mar 2008 13:16:14 -0700,
Mike wrote:
> 
> > (In a struggle to bring the thread back to tls-relevance...)
> 
> In my opinion, this is very relevant to TLS.  TLS is being
> mis-used so badly, that security is unnecessarily horrible.
> TLS itself is not bad, but if (when) something bad happens,
> it will be blamed for being insecure.  You don't want that
> to happen.
> 
> I think that it's become necessary for the TLS WG to put
> together a document with hard numbers in it for key lengths,
> relative strengths, expected lifetime for data protected by
> those keys/lengths/algorithms.

RFC 3766.

-Ekr
_______________________________________________
TLS mailing list
TLS@xxxxxxxx
https://www.ietf.org/mailman/listinfo/tls