[saag] Re: NIST Requests Comments on SP 800-52 Rev. 2 | Selection, Configuration, and Use of TLS Implementations

Muhammad Usama Sardar <[email protected]> Fri, 8 May 2026 00:54:17 +0200
Newsgroups	gmane.ietf.saag
Message-ID	<[email protected]>
--===============1856539003358064536==
Content-Language: en-US
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-512; boundary="------------ms040101000402020609090901"

--------------ms040101000402020609090901
Content-Type: multipart/alternative;
 boundary="------------lfbWSdeBNu7WoomB1jSugIl0"

--------------lfbWSdeBNu7WoomB1jSugIl0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------lfbWSdeBNu7WoomB1jSugIl0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF=
-8">
  </head>
  <body>
    <p>Hi Quynh,</p>
    <p>Thank you for sharing NIST document for comments. I have the
      following comments:<br>
    </p>
    <div class=3D"moz-cite-prefix">On 07.05.26 23:11, Eric Rescorla wrote=
:<br>
    </div>
    <blockquote type=3D"cite"
cite=3D"mid:[email protected]=
l.com">
      <div dir=3D"ltr">
        <div>The latest version of this document is from 2019 and it
          really is in fairly bad need of=C2=A0 revision beyond the quest=
ions
          asked on the NIST page.</div>
      </div>
    </blockquote>
    <p>I agree with Ekr. It would be helpful to update the document
      before requesting comments.<br>
    </p>
    <p>In addition, in <i>my</i> reading, the three questions being
      asked seem to be somewhat settled at the IETF, no? See for example
      [0] and [1].</p>
    <p>Finally, modern extension of TLS, known as <i>attested TLS,</i>
      supports <i>remote attestation</i> to provide additional trust
      anchor for protection. At the very least, I think NIST should add
      remote attestation as "future capabilities" in Appendix E. Please
      see the proposed design [2] for details. Please encourage the
      relevant team at NIST to join SEAT WG [3] to contribute to the
      work. We would welcome any feedback from NIST on the design [2].<br=
>
    </p>
    <p>Thank you for considering my comments.</p>
    <p>Best regards,</p>
    <p>-Usama<br>
    </p>
    <p>[0] <a class=3D"moz-txt-link-freetext" href=3D"https://datatracker=
=2Eietf.org/doc/draft-ietf-tls-tls12-frozen/">https://datatracker.ietf.or=
g/doc/draft-ietf-tls-tls12-frozen/</a></p>
    <p>[1]
      <a class=3D"moz-txt-link-freetext" href=3D"https://datatracker.ietf=
=2Eorg/doc/draft-ietf-uta-require-tls13/">https://datatracker.ietf.org/do=
c/draft-ietf-uta-require-tls13/</a></p>
    <p>[2] <a class=3D"moz-txt-link-freetext" href=3D"https://datatracker=
=2Eietf.org/doc/draft-fossati-seat-expat/">https://datatracker.ietf.org/d=
oc/draft-fossati-seat-expat/</a></p>
    <p>[3] <a class=3D"moz-txt-link-freetext" href=3D"https://datatracker=
=2Eietf.org/wg/seat/about/">https://datatracker.ietf.org/wg/seat/about/</=
a><br>
    </p>
  </body>
</html>

--------------lfbWSdeBNu7WoomB1jSugIl0--

--------------ms040101000402020609090901
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms040101000402020609090901--


--===============1856539003358064536==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18Kc2FhZyBtYWls
aW5nIGxpc3QgLS0gc2FhZ0BpZXRmLm9yZwpUbyB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRv
IHNhYWctbGVhdmVAaWV0Zi5vcmcK

--===============1856539003358064536==--