3 ms·
David Benjamin has proposed the GREASE proposal for TLS. Basically, random values of future flags are thrown around so that servers (not middleboxes) have no ch
by Moodles 9y ago
David Benjamin has proposed the GREASE proposal for TLS. Basically, random values of future flags are thrown around so that servers (not middleboxes) have no choice but to process them. I think it is a good idea, but there are still occasionally niggles such as certain machines processing different meanings for specific flags, causing them to not be able to speak TLS 1.3.
- pacificmint 9y agoCloudflare had an interesting blog post[1] a month ago about TLS 1.3. It talks extensively about ossification and the GREASE proposal. [1] https://blog.cloudflare.com/why-tls-1-3-isnt-in-browsers-yet/ https://blog.cloudflare.com/why-tls-1-3-isnt-in-browsers-yet... Previous HN discussion of the post: https://news.ycombinator.com/item?id=16010930 https://news.ycombinator.com/item?id=16010930
- indescions_2018 9y agoCloudFlare's Filippo Valsorda also dives into the nitty gritty of their TLS 1.3 implementation here: TLS 1.3 - CloudFlare London Tech Talk https://vimeo.com/177333631 https://vimeo.com/177333631 And his experimental golang crypto/tls pkg: https://github.com/cloudflare/tls-tris https://github.com/cloudflare/tls-tris
- deleted 9y ago[deleted]
- the8472 9y agogrease works for string-valued flags. It's a bit more difficult to grease bitfields.