ETS Isn't TLS and You Shouldn't Use It

guest · Feb 27, 2019

ETS Isn't TLS and You Shouldn't Use It
February 26, 2019
https://www.eff.org/deeplinks/2019/02/ets-isnt-tls-and-you-shouldnt-use-it

Thanks to a financial industry group called BITS, there’s a look-alike protocol brewing called called ETS (or eTLS) that intentionally disables important security measures in TLS 1.3. If someone suggests that you should deploy ETS instead of TLS 1.3, they are selling you snake oil and you should run in the other direction as fast as you can.
ETS vs. TLS / SSL
ETS removes forward secrecy, a feature that is so widely used and valued in TLS 1.2 that TLS 1.3 made it mandatory.
Nowadays, it just makes plain sense to use forward secrecy for all TLS connections. [...]
“Enterprise” Transport Security Tries to Use TLS’ Good Name
Meanwhile, the IETF caught wind of this and strenuously objected to the misleading use of the name TLS in “eTLS:” “Our foremost concern remains the use of a name that implies the aegis of Transport Layer Security (TLS), a well-known protocol which has been developed by the IETF for over twenty years.”
Click to expand...

Log in or Sign up

ETS Isn't TLS and You Shouldn't Use It

guest Guest

Log in or Sign up

ETS Isn't TLS and You Shouldn't Use It

guest Guest

Useful Searches