On: TLS-N: Non-repudiation over TLS

[patcheudor]

"TLS-N is the first TLS extension that provides non-repudiation and thereby enables parties to verify each others TLS connections and its contents."

Is it the first? X.509 client authentication provides a mutually authenticated TLS connection.

https://en.wikipedia.org/wiki/X.509

[floatboth → patcheudor]

Non-repudiation != mutual authentication

[patcheudor → floatboth]

Server has an issued cert. Client has an issued cert. The publics are exchanged and authenticated. Each can then be chained up to an issuer to prove identity. That's nonrepudiation.

[detaro → patcheudor]

That provides proof of identity for both parties, but not a way with which a party can prove anything about the message content afterwards. The key with which the contents are encrypted is symmetric and known to both parties, so at that state the content is not bound to the sender identity. If you can't tie content to sender identity, you do not have non-repudiation.