26   Add security event non-encrypting cipher suites is used

Created: 17 Jul 2023

Status: Approval (Future Improvement)

Part: Part 3 (2023, Edition 2)

Links:

Page: 16

Clause: 6.3

Paragraph: 1

Issue

Add security event non-encrypting cipher suites is used

Proposal

A security event shall be raised if a non-encrypting TLS cipher suite is used.

Discussion Created Status
- Approved during WG15 Meeting 10/2023, based on previous FDIS comment resolution discussion
- Proposal accepted 		19 Oct 23 Approval (Future Improvement)
- Approved during WG15 Meeting 10/2023, based on previous FDIS comment resolution discussion
- Proposal accepted 		19 Oct 23 Discussion (red)
I am OK with the addition in section 6.1 and in table A1.
However, in section 6.1 more text has changed than only the proposed addtion. The second paragraph is now split into two paragraphs ... 		08 Aug 23 Discussion (red)
Proposal according to FDIS comment resolution 26 Jul 23 Discussion (red)
Accepted in FDIS comment resolution an WG15 meeting in May 2023 19 Jul 23 Accepted
This comment was partly accepted during FDIS comment resolution and not included in the final IEC 62351-3 Ed.2.

Proposal:
Add information about the negotiated ciphersuite to successful TLS session establishment security event in the ExtraInfo field in section 6.1

Note that the negotiated ciphersuite needs to be added to the ExtraInfo field in in Table A.1. 		17 Jul 23 Triage

 

Privacy | Contact | Disclaimer

Tissue DB v. 23.12.13.1