4 ms·

Unfortunately, the way it works in reality means adding ciphersuites is easier than adding new versions.

• tptacek 10y ago
  "Ciphersuites" simply should not be a thing. Each version of the protocol should hardcode one set of crypto primitives.
  • wolf550e 10y ago
    What if people want AES-GCM on hardware with AESNI and CHACHA20-POLY1305 on all other hardware? Should those be two protocol versions that are both accepted by everyone and neither is planned to be deprecated? What about Ed25519 vs. Ed448? What if something was deployed with (SHA256 P-256 ECDHE-ECDSA-AES128-GCM), which Google promised to support for a long time, and now people want to switch to djb-blessed X25519-Ed25519-AES256-GCM, will the older ciphersuite be an old protocol version that everyone keeps supporting for >10 years?
    • tptacek 10y ago
      My take? Tough. Use ChaCha/Poly. It's a better design for other reasons (mostly not related to TLS, but still). Same with curves. Nobody really benefits from selectable 25519 vs 448.
      • djcapelis 10y ago
        sgtm. Let's go build an Internet.