News for hackers. Stuff that matters.

A comment on QUIC – Will It Replace TCP/IP?. Parent comment

Re:QUIC – Will It Replace TCP/IP? by thayne on Thursday April 02, 2020 @04:29PM (#22763342)
If you are in a situation where you can have a shared key, TLS, with it's asymmetric handshake is probably overkill.
[ Parent | on HN ]
Re:QUIC – Will It Replace TCP/IP? by tialaramex on Thursday April 02, 2020 @06:17PM (#22764475)
You can do TLS with shared keys. The rest of this comment describes the situation in TLS 1.3 since earlier versions are not used in QUIC and future versions don't exist yet.

If you want Forward Secrecy you still need to do the DH steps so that you'll get unique session keys, but you don't need a certificate since your mutual knowledge of the shared key is sufficient.

If you don't need Forward Secrecy (pro tip: You actually do, but I can't stop you) then you can skip DH and just go straight to the main course.

[ Parent | on HN ]
Re:QUIC – Will It Replace TCP/IP? by thayne on Thursday April 02, 2020 @07:16PM (#22764855)
> you don't need a certificate since your mutual knowledge of the shared key is sufficient

How would you do that? The API's I've seen for TLS all require the use of certificates.

[ Parent | on HN ]