Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-26 Thread Robert Ransom
On 2012-03-26, Nick Mathewson wrote: > On Mon, Mar 26, 2012 at 3:17 AM, Robert Ransom > wrote: > [...] >>>(OpenSSL before 1.0.0 did not support ECDHE ciphersuites; OpenSSL >>>before 1.0.0e or so had some security issues with them.) >> >> Can Tor detect that it is running with a version o

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-26 Thread Nick Mathewson
On Mon, Mar 26, 2012 at 3:17 AM, Robert Ransom wrote: [...] >>    (OpenSSL before 1.0.0 did not support ECDHE ciphersuites; OpenSSL >>    before 1.0.0e or so had some security issues with them.) > > Can Tor detect that it is running with a version of OpenSSL with those > security issues and refus

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-26 Thread Robert Ransom
On 2012-03-20, Nick Mathewson wrote: > Filename: 198-restore-clienthello-semantics.txt > Title: Restore semantics of TLS ClientHello > Author: Nick Mathewson > Created: 19-Mar-2012 > Status: Open > > Overview: > >Currently, all supported Tor versions try to imitate an older version >of Fir

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Jacob Appelbaum
On 03/20/2012 09:08 PM, Nick Mathewson wrote: > On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote: > [...] >> Ah ha. That sounds like a nightmare. Is there a bug report we can pile >> on to request that they don't create a headache for everyone in the future? > > There is, but I don't curre

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote: [...] > Ah ha. That sounds like a nightmare. Is there a bug report we can pile > on to request that they don't create a headache for everyone in the future? There is, but I don't currently see much point: their developers are irritated, and

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
Jacob sent me this message in reply to my last; sending to tor-dev with permission. On Tue, Mar 20, 2012 at 11:57 PM, Jacob Appelbaum wrote: > On 03/20/2012 08:14 PM, Nick Mathewson wrote: >> On Tue, Mar 20, 2012 at 9:30 PM, Jacob Appelbaum wrote: >>> On 03/20/2012 08:33 AM, Nick Mathewson wrote

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
Forgot to send this to tor-dev: ouch. Sending now. On Tue, Mar 20, 2012 at 9:30 PM, Jacob Appelbaum wrote: > On 03/20/2012 08:33 AM, Nick Mathewson wrote: >> Filename: 198-restore-clienthello-semantics.txt >> Title: Restore semantics of TLS ClientHello >> Author: Nick Mathewson >> Created: 19-Ma

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Robert Ransom
On 2012-03-21, Tom Ritter wrote: > On 20 March 2012 11:33, Nick Mathewson wrote: >> Filename: 198-restore-clienthello-semantics.txt >> Title: Restore semantics of TLS ClientHello >> Author: Nick Mathewson >> Created: 19-Mar-2012 >> Status: Open > > I've not worked with TLS renegotiations before,

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
On Tue, Mar 20, 2012 at 10:48 PM, Tom Ritter wrote: > On 20 March 2012 11:33, Nick Mathewson wrote: >> Filename: 198-restore-clienthello-semantics.txt >> Title: Restore semantics of TLS ClientHello >> Author: Nick Mathewson >> Created: 19-Mar-2012 >> Status: Open > > I've not worked with TLS rene

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Tom Ritter
On 20 March 2012 11:33, Nick Mathewson wrote: > Filename: 198-restore-clienthello-semantics.txt > Title: Restore semantics of TLS ClientHello > Author: Nick Mathewson > Created: 19-Mar-2012 > Status: Open I've not worked with TLS renegotiations before, but could Tor perform a renegotiation after

Re: [tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Jacob Appelbaum
On 03/20/2012 08:33 AM, Nick Mathewson wrote: > Filename: 198-restore-clienthello-semantics.txt > Title: Restore semantics of TLS ClientHello > Author: Nick Mathewson > Created: 19-Mar-2012 > Status: Open > [ ... ] > Currently, OpenSSL 1.0.0 (in its default configuration) supports every > c

[tor-dev] Proposal 198: Restore semantics of TLS ClientHello

2012-03-20 Thread Nick Mathewson
Filename: 198-restore-clienthello-semantics.txt Title: Restore semantics of TLS ClientHello Author: Nick Mathewson Created: 19-Mar-2012 Status: Open Overview: Currently, all supported Tor versions try to imitate an older version of Firefox when advertising ciphers in their TLS ClientHello.