Skip to content

Commit

Permalink
Tweak focus
Browse files Browse the repository at this point in the history
  • Loading branch information
martinthomson committed Mar 15, 2024
1 parent 94b2d91 commit a8d3683
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions draft-ietf-tls-keylogfile.md
Original file line number Diff line number Diff line change
Expand Up @@ -249,9 +249,9 @@ access to these capabilities.

Forward secrecy guarantees provided in TLS 1.3 (see {{Section 1.2 and Appendix
E.1 of ?RFC8446}}) and some modes of TLS 1.2 (such as those in {{Sections 2.2
and 2.4 of ?RFC4492}}) do not hold if keys are saved. Logged keys
therefore risk the authenticity, confidentiality, and integrity of any data that
is exchanged.
and 2.4 of ?RFC4492}}) do not hold if keys are saved. Access to logged keys
affects the authenticity, confidentiality, and integrity of any data that is
exchanged for longer period than if an authentication key is compromised.

Logging the TLS 1.2 "master" secret provides the recipient of that secret far
greater access to an active connection than TLS 1.3 secrets. In addition to
Expand Down

0 comments on commit a8d3683

Please sign in to comment.