Protocol Action: 'Unknown Key Share Attacks on uses of TLS with the Session Description Protocol (SDP)' to Proposed Standard (draft-ietf-mmusic-sdp-uks-07.txt)
The IESG <[email protected]> Tue, 13 Aug 2019 15:16:57 -0700
| Newsgroups | gmane.ietf.announce,gmane.ietf.mmusic |
|---|---|
| Message-ID | <[email protected]> |
VGhlIElFU0cgaGFzIGFwcHJvdmVkIHRoZSBmb2xsb3dpbmcgZG9jdW1lbnQ6Ci0gJ1Vua25vd24g S2V5IFNoYXJlIEF0dGFja3Mgb24gdXNlcyBvZiBUTFMgd2l0aCB0aGUgU2Vzc2lvbiBEZXNjcmlw dGlvbgogICBQcm90b2NvbCAoU0RQKScKICAoZHJhZnQtaWV0Zi1tbXVzaWMtc2RwLXVrcy0wNy50 eHQpIGFzIFByb3Bvc2VkIFN0YW5kYXJkCgpUaGlzIGRvY3VtZW50IGlzIHRoZSBwcm9kdWN0IG9m IHRoZSBNdWx0aXBhcnR5IE11bHRpbWVkaWEgU2Vzc2lvbiBDb250cm9sCldvcmtpbmcgR3JvdXAu CgpUaGUgSUVTRyBjb250YWN0IHBlcnNvbnMgYXJlIEFkYW0gUm9hY2gsIEFsZXhleSBNZWxuaWtv diBhbmQgQmFycnkgTGVpYmEuCgpBIFVSTCBvZiB0aGlzIEludGVybmV0IERyYWZ0IGlzOgpodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLW1tdXNpYy1zZHAtdWtzLwoK CgoKClRlY2huaWNhbCBTdW1tYXJ5CgpUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB1bmtub3duIGtl eS1zaGFyZSBhdHRhY2tzIG9uIHRoZSB1c2Ugb2YKRGF0YWdyYW0gVHJhbnNwb3J0IExheWVyIFNl Y3VyaXR5IGZvciB0aGUgU2VjdXJlIFJlYWwtVGltZSBUcmFuc3BvcnQKUHJvdG9jb2wgKERUTFMt U1JUUCkuICBTaW1pbGFyIGF0dGFja3MgYXJlIGRlc2NyaWJlZCBvbiB0aGUgdXNlIG9mCkRUTFMt U1JUUCB3aXRoIHRoZSBpZGVudGl0eSBiaW5kaW5ncyB1c2VkIGluIFdlYiBSZWFsLVRpbWUKQ29t bXVuaWNhdGlvbnMgKFdlYlJUQykgYW5kIFNJUCBpZGVudGl0eS4gIFRoZXNlIGF0dGFja3MgYXJl CmRpZmZpY3VsdCB0byBtb3VudCwgYnV0IHRoZXkgY2F1c2UgYSB2aWN0aW0gdG8gYmUgbWlzbGVh ZCBhYm91dCB0aGUKaWRlbnRpdHkgb2YgYSBjb21tdW5pY2F0aW5nIHBlZXIuICBTaW1wbGUgbWl0 aWdhdGlvbiB0ZWNobmlxdWVzIGFyZQpkZWZpbmVkIGZvciBlYWNoLgoKV29ya2luZyBHcm91cCBT dW1tYXJ5CgpUaGUgZG9jdW1lbnTigJlzIHByb2dyZXNzIHRocm91Z2ggdGhlIHdvcmtpbmcgZ3Jv dXAgd2FzIHVucmVtYXJrYWJsZS4KCkRvY3VtZW50IFF1YWxpdHkKClRoZSBkb2N1bWVudCB3YXMg cmV2aWV3ZWQgYW5kIGRpc2N1c3NlZCBieSBhIHNtYWxsIGdyb3VwIG9mIGtleSBNTVVTSUMgYW5k IFJUQ1dFQiBtZW1iZXJzLiBObyBpbXBsZW1lbnRhdGlvbnMgYXJlIGtub3duLgoKUGVyc29ubmVs CgogIFdobyBpcyB0aGUgRG9jdW1lbnQgU2hlcGhlcmQ/IFdobyBpcyB0aGUgUmVzcG9uc2libGUg QXJlYQogIERpcmVjdG9yPwoKVGhlIERvY3VtZW50IFNoZXBoZXJkIGlzIEJvIEJ1cm1hbi4KVGhl IFJlc3BvbnNpYmxlIEFEIGlzIEFkYW0gUm9hY2guCgoKUkZDIEVkaXRvciBOb3RlCgpQbGVhc2Ug bWFrZSB0aGUgZm9sbG93aW5nIHR3byBjaGFuZ2VzIHRvIHRoZSBkb2N1bWVudC4KCkluIFNlY3Rp b24gMy4yCgpPTEQKCiAgIEFuICJleHRlcm5hbF9pZF9oYXNoIiBleHRlbnNpb24gdGhhdCBpcyBh bnkgbGVuZ3RoIG90aGVyIHRoYW4gMCBvciAzMgogICBpcyBpbnZhbGlkIGFuZCBNVVNUIGNhdXNl IHRoZSByZWNlaXZpbmcgZW5kcG9pbnQgdG8gZ2VuZXJhdGUgYSBmYXRhbAogICAiZGVjb2RlX2Vy cm9yIiBhbGVydC4KCk5FVwogIEFuICJleHRlcm5hbF9pZF9oYXNoIiBleHRlbnNpb24gd2l0aCBh ICJiaW5kaW5nX2hhc2giIGZpZWxkIHRoYXQgaXMgYW55CiAgbGVuZ3RoIG90aGVyIHRoYW4gMCBv ciAzMiBpcyBpbnZhbGlkIGFuZCBNVVNUIGNhdXNlIHRoZSByZWNlaXZpbmcgZW5kcG9pbnQKICB0 byBnZW5lcmF0ZSBhIGZhdGFsICJkZWNvZGVfZXJyb3IiIGFsZXJ0LgoKU2VjdGlvbiA2CgpPTEQK CiAgIFdpdGhvdXQgaWRlbnRpdHkgYXNzZXJ0aW9ucywgdGhlIG1pdGlnYXRpb25zIGluIHRoaXMg ZG9jdW1lbnQgcHJldmVudAogICB0aGUgc2Vzc2lvbiBzcGxpY2luZyBhdHRhY2sgZGVzY3JpYmVk IGluIFNlY3Rpb24gNC4gIERlZmVuc2UgYWdhaW5zdAogICBzZXNzaW9uIGNvbmNhdGVuYXRpb24g KFNlY3Rpb24gNSkgYWRkaXRpb25hbGx5IHJlcXVpcmVzIHByb3RvY29sCiAgIHBlZXJzIGFyZSBu b3QgYWJsZSB0byBjbGFpbSB0aGUgY2VydGlmaWNhdGUgZmluZ2VycHJpbnRzIG9mIG90aGVyCiAg IGVudGl0aWVzLgoKTkVXCgogICBXaXRob3V0IGlkZW50aXR5IGFzc2VydGlvbnMsIHRoZSBtaXRp Z2F0aW9ucyBpbiB0aGlzIGRvY3VtZW50IHByZXZlbnQKICAgdGhlIHNlc3Npb24gc3BsaWNpbmcg YXR0YWNrIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuICBEZWZlbnNlIGFnYWluc3QKICAgc2Vzc2lv biBjb25jYXRlbmF0aW9uIChTZWN0aW9uIDUpIGFkZGl0aW9uYWxseSByZXF1aXJlcyB0aGF0IHBy b3RvY29sCiAgIHBlZXJzIGFyZSBub3QgYWJsZSB0byBjbGFpbSB0aGUgY2VydGlmaWNhdGUgZmlu Z2VycHJpbnRzIG9mIG90aGVyCiAgIGVudGl0aWVzLgoKKFJlcGxhY2UgInJlcXVpcmVzIiB3aXRo ICJyZXF1aXJlcyB0aGF0IikKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCklFVEYtQW5ub3VuY2UgbWFpbGluZyBsaXN0CklFVEYtQW5ub3VuY2VAaWV0Zi5v cmcKaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pZXRmLWFubm91bmNlCg==